Hi,
as far as I see, the server side config is missing (either by configuring the security domain in "login-config.xml" or by adding a "...-jboss-beans.xml" file). Take a look at this document:
http://server.dzone.com/articles/security-features-jboss-510
Best regards
Wolfgang