If you has direct request to j_security_check you get:
HTTP Status 400 - Invalid direct reference to form login page
This is bad when you get login page and wait untill session expired (possibly have lunch break). And when you try to login you get this error.
[Message sent by forum member 'andronick' (andronick)]
http://forums.java.net/jive/thread.jspa?messageID=205452