The DefaultAuthenticationFailureHandler has a deprecated constructor that was present to prevent a breaking change to custom realm plugin authors in 6.x. This commit removes the constructor and its uses.