Thanks guys for your help.
I manage to get the source code of the loginFilter from the development team. I attach the file with this post.
I already told them that something wrong with this code in the early stage but they dont believe me. Even when I show you guys this post they still playing defensive with me. Don't know how to tell them anymore.
[Message sent by forum member 'badul' (dzafarul_at_gmail.com)]
http://forums.java.net/jive/thread.jspa?messageID=381081