Spring Security Authentication

How is a request processed? The client makes a HTTP request to a web server(TomCat or JBoss), the request is then forwarded to the appropriate servlet for processing(For spring : dispatcher servlet). The answer is updated and returned to the client. ...