I'll have to agree with Alex. What's going on in com.htp.filter.LoginFilter ? Sounds like there is some non-threadsafe code there. That's your code, right?
That's where several locks are waiting in your threads:
waiting to lock <0x00002aaaf923e988> (a com.htp.filter.LoginFilter)
[Message sent by forum member 'culli' (jim.cullison_at_gmail.com)]
http://forums.java.net/jive/thread.jspa?messageID=380971