The Callbackhandler is quite critical for JASPI auth module processing. So rather than relying on the general cbh in the authentication manager, we should have a CBH as part of the method.