[Security & JAAS/JBoss] - Re: custom login module access httpservletrequest