[jboss-user] [Security & JAAS/JBoss] - federated SSO framework and http cookies