JAAS has lack of many features. For example remember me, which has to be done programmatically atm, and is not so convenient. Another thing is lack of actual login page, it quite excists only in container and is not accessible through web root.

Are these the reasons why jboss.com does not use JAAS?
What does it use after all?