The link ref tags in the welcome page and protected pages ofcourse point to the CSS using diff paths. However, when jsf navigates from welcome to a protected page the browser still shows welcome.page with sessionid appended and not the url of the protected page. So, I have to map the filter for all requests(*). I would like to able to map the filter only to requests that only contain 'protected'.
This also means the browser has no idea whats going on and when the server navigates to the protected page, the browser seems to still be pointing to the welcome page css path, thus no css is rendered in the protected page.