[Security & JAAS/JBoss] - Re: single sign on between two different web-app running on