If you read the stack trace, your problem seems to be related to serialization of sessions. Check the permissions on your Glassfish files and directories as well as those configured for temp files etc.
Caused by: java.security.AccessControlException: access denied
(java.lang.reflect.ReflectPermission suppressAccessChecks)
at java.security.AccessControlContext.checkPermission
(AccessControlContext.java:264)
at java.security.AccessController.checkPermission
(AccessController.java:427)
[Message sent by forum member 'wfay' (wfay)]
http://forums.java.net/jive/thread.jspa?messageID=325204