Asking the user to specify a callback handler is overkill when most of the time he just needs username/password/realm. Allow these to be set easily by using an internal basic callbackhandler. This configuration would be mutually exclusive with an explicit callback handler