works

public void onInit(@Observes SecurityConfigurationEvent event)

but

but my login form is in login.fam

My web.xml

<servlet-mapping>
<servlet-name>Faces Servlet</servlet-name>
<url-pattern>*.fam</url-pattern>
</servlet-mapping>