A change in Jetty security from 6 to 7 is the introduction of 
LoginService, which was 
designed to replace 
UserRealm based approach. The usage of LoginService can be seen in the example 
SecuredHelloHandler and the test case of 
SecuredContentExchangeTest . Basically, the LoginService needs to be attached to a SecurityHander, and the SecurityHandler needs to wrap the handler that needs the authentication service. This can be done by either
securityHandler.setHandler(yourHandler); 
or
ServletContextHandler theContext = new ServletContextHandler(handlerContainer, contextPath, sessionHandler, securityHandler, servletHandler, errorHandler);