In form-based authentication， what must be included in the HTML returned from the URL specified by the  element？（）

• A、 a base-64 encoded user name and password
• B、 a form that POSTs to the j_security_check URL
• C、 an applet that requests the user name and password from the user
• D、 a hidden field that supplies the login-constraint used by the application