We're using Websphere 6.2 and the standard security mechanism. For some reason the content type is being assigned as XML instead of html/text for the login error jsp. Accessed directly it's fine. This is the error we get in IE:
Use of default namespace declaration attribute in DTD not supported.