What initializes the security context in forms authentication?

Question

If FormsAuthenticationModule detects forms authentication ticket in the request, it automatically creates security context by initializing HttpContext.Current.User property. This happens during Application.AuthenticateRequest event.

Assuming we log in user via CreateUserWizard control, then by the time CreatUserWizard's ContinueButtonClick event is raised, security context for that user is already initialized.

But was the security context initialized by FormsAuthenticationModule or by some other module? Namely, isn't FormsAuthenticationModule called only during Application.AuthenticateRequest event?