Gabriel Tunde

Thanks.
I tried both solutions proferred in the jboss link and both worked independent of each other.
Thanks once again.

I am using Form-based authentication in my login page, when a user login, he is validated and his credentials are stored in the cache(i guess). When the user changes his credential (like his password for example), he is still able to login with the previous password until he login with the new password before the previous credentials stored are discarded. Does j_security_check supports caching and how is it disabled? I am using Jboss as the application server. Please help................