Please help - JSF newbie question on user authentication