I have written simple application with container-managed security. The problem is when I log in and open another page on which I logout, then I come back to first page and I
Avoid multipart forms in Richfaces:
If you are using Richfaces, i have found that ajax requests inside of multipart forms return a new View ID on each request.
How to debug:
On each ajax request a View ID is returned, that is fine as long as the View ID is always the same. If you get a new View ID on each request, then there is a problem and must be fixed.