Hi <%= request.getUserPrincipal().getName() %>, you're now authenticated.

This is the default entry page, try to access some of the protected resources: