In pages.xml, I have a number of pages set with the login-required="true" attribute. I don't have the login-view-id set on the pages tag. Normal flow is that the user gets properly authenticated and only then accesses the protected pages.
However when the session expires, and he clicks one of the protected pages, the NotLoggedInException is thrown. Even if I add the exception tag and redirect to a non-protected page, this error is thrown. The log file says:
ERROR org.jboss.seam.jsf.SeamPhaseListener : uncaught exception org.jboss.seam.security.NotLoggedInException
This needs to be implemented better. It should be in the next Beta3 release.