title: 403 after successful form authentication
body: <p>I'm using form based authentication in a webapp on JBoss 7, backed by an LdapLoginModule.</p>
  
  <pre class="lang-xml prettyprint-override"><code>&lt;security-constraint&gt;
      &lt;web-resource-collection&gt;
          &lt;web-resource-name&gt;Protected Resources&lt;/web-resource-name&gt;
          &lt;url-pattern&gt;/*&lt;/url-pattern&gt;
      &lt;/web-resource-collection&gt;
      &lt;auth-constraint&gt;
          &lt;role-name&gt;*&lt;/role-name&gt;
      &lt;/auth-constraint&gt;
      &lt;user-data-constraint&gt;
          &lt;transport-guarantee&gt;NONE&lt;/transport-guarantee&gt;
      &lt;/user-data-constraint&gt;
  &lt;/security-constraint&gt;
  &lt;login-config&gt;
      &lt;auth-method&gt;FORM&lt;/auth-method&gt;
      &lt;realm-name&gt;ldap&lt;/realm-name&gt;
      &lt;form-login-config&gt;
          &lt;form-login-page&gt;login.html&lt;/form-login-page&gt;
          &lt;form-error-page&gt;login.html&lt;/form-error-page&gt;
      &lt;/form-login-config&gt;
  &lt;/login-config&gt;
  </code></pre>
  
  <p>On accessing / I'm sent to login.html and if I put an invalid password in then to /j_security_check. If I put the correct password in though I'm sent to / but get the following error in the browser:</p>
  
  <pre class="lang-none prettyprint-override"><code>HTTP Status 403 - Access to the requested resource has been denied
  </code></pre>
  
  <p>Why would I be being denied access to the index.html after successfully negotiating the login form? There's no sign of any log output.</p>