End-to-end request flow for authenticating a user accessing an Access Manager protected resource