I posted a question yesterday in the JSP forum about determining whether a page was the page that triggered the login attempt.
The original question is at
Tomcat CMS, FBA and Authorization.
If you know an answer to this please post it there. There are dukes there, for what they are worth.