In form-based authentication, what must be included in the HTML returned from the URL specified by the element?
a base-64 encoded user name and password
a form that POSTs to the j_security_check URL
an applet that requests the user name and password from the user
a hidden field that supplies the login-constraint used by the application