title: JAAS CustomLoginModule not called for second location a user logs in
body: <p>We implemented a <code>CustomLoginModule extends UsernamePasswordLoginModule</code> for JAAS in JBoss EAP 6.2.</p>
  
  <p>The login module contains functionality that needs to be handled every login and it appears that for some logins, the <code>CustomLoginModule</code> is not called.</p>
  
  <p>We notice that when a user logs in at two separate locations, the second login never enters the <code>CustomLoginModule</code> methods: <code>initialize, login, logout, getRoleSets, getUsersPassword, createPasswordHash, validatePassword</code> .
  It seems like the logged in user's password and roles are cached and reused.</p>
  
  <p>If the second user logs in with a wrong password, the validatePassword method is called.</p>
  
  <p>So my question is: how can I force every login to go through the <code>CustomLoginModule</code>?</p>