Glassfish v3.0.1-b4 and HttpServletRequest#login do what I need. It's actually very easy to get things working the way I wanted using Servlet 3.0.
Thank you for all the help!
Ryan
[Message sent by forum member 'jptech' (ryan_at_jptech.ca)]
http://forums.java.net/jive/thread.jspa?messageID=386382