In looking at the message, there is no "error". The message is logged at the INFO level which means it's just letting you know that there is no Principal object, probably because either the resource is not protected or the user hasn't authenticated.
You may want to make sure that ssl is working correctly though, by accessing a normal page through https.
TB
[Message sent by forum member 'travbow' (travbow)]
http://forums.java.net/jive/thread.jspa?messageID=259296