[jboss-user] [Security & JAAS/JBoss] - Commenting out auth-method in web.xml does not lead to error