62104: Fix programmatic login regression as the NonLoginAuthenticator has to be set for it to work (if no login method is specified). This is fix 2 of 2 for CVE-2018-1305
tomcat/trunk/java/org/apache/catalina/startup/ContextConfig.java
tomcat/trunk/webapps/docs/changelog.xml