[Security & JAAS/JBoss] - Re: JAAS login/logout behaviour