There seems to be some confusion between BASIC and Form BASed Login. if you have configured your app in web.xml to use BASIC AUTH as its auth method, then you will not nmeed to define a login form. Conversely, if you have configured your app to use FORM BAsed Login, you will need to provide a login form, and the senaky behavior of BASIC that I alluded to in my prior response will no longer apply.
[Message sent by forum member 'monzillo' (ronald.monzillo_at_sun.com)]
http://forums.java.net/jive/thread.jspa?messageID=390096