title: Java EE: Unauthenticated POST and j_security_check
body: <p>I tried to do some research on this and came across the following question on another site:</p>
  
  <p><a href="http://www.theserverside.com/discussions/thread.tss?thread_id=36561" rel="nofollow">http://www.theserverside.com/discussions/thread.tss?thread_id=36561</a></p>
  
  <p>Unfortunately, the answer there was to switch to GET requests, which I'm hoping there's a better solution. To reiterate the problem:</p>
  
  <p>The scenario is when a user is on a search page for instance, their session expires, and then they click the submit button. At this point, the login page shows up since they aren't logged in anymore. After successfully logging in, j_security_check is resending the POST request to the search from before but without any of the POST data. I would like to be able to get the POST data from the original request, or I want to configure j_security_check to never send POST requests after logging in, but instead force it to use GET requests.</p>
  
  <p>Any help is greatly appreciated.</p>