In my application it is required that only certain pages need to be secured using SSL so i configured it
security-constraint> <display-name>Security Settings</display-name> <web-resource-collection> <web-resource-name>SSL Pages</web-resource-name> <description/> ...
I havent found a real solution for this problem, even when it is really common... I have this context: