my latest discovery is that the cause of the problem is that there is an issue with the background-image css attribute in fact... The image is not being displayed and later on I'm being redirected to that image!
Sounds like secured content referenced by the login form is being restricted. Sounds like tomcat is not handling jsf login forms correctly yet.
Ok everything is allright it's just my fault
This is the cause of the problem
Whenever i'm trying to access any resource, including pictures or css stylesheets i'm accessing secured resource.