if i redeploy my app and try to access a protected page, it will throw up the login screen as expected, but after entering the user/pass and pressing enter it will just show the reload the login page

i then enter user/pass a 2nd time and press enter and i get j_security_check not found error page.

however if i just hit the reload button instead of typing it the 2nd time, it takes me to the desired page.