I think I found the answer to my own question, but posting it here in case it helps anyone. If you just change the "DefaultCacheTimeout" option in jboss-service.xml from the default of 1800 to 0, this will stop logins from being cached. Obviously this approach has some downsides, but it should at least solve the problem.