Erro ao utilizar JAAS não consigo autenticar o usuario e senha ?Invalid direct reference to

Front-end
#1

Olá,

ao digitar o usuário e senha correto (valida via banco) ao clicar no botão Login aparece a mensagem de erro abaixo e não chama a pagina home.jsp:

HTTP Status 400 - Invalid direct reference to form login page

type Status report

message Invalid direct reference to form login page

description The request sent by the client was syntactically incorrect (Invalid direct reference to form login page).
Apache Tomcat/7.0.4

login.jsp

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"
"http://www.w3.org/TR/html4/strict.dtd">
<html lang="pt-br">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />

<title>.:: Autenticação ::.</title>

</head>
<body>

<!-- form method="POST" action="<%= response.encodeURL("j_security_check") %>"  -->

<form method="POST" action="<%= response.encodeURL("j_security_check") %>" >
<fieldset title="Informe login e senha">
<legend>Login</legend>

<label for="j_username">Login:</label>
&lt;input type="text" name="j_username" class="textBox"/&gt;<br/>

&lt;label for="j_password"&gt;Senha:&lt;/label&gt;
&lt;input type="password" name="j_password" class="textBox"/&gt;<br/>

&lt;/fieldset&gt;
<p >
&lt;input type="submit" value="Log In"/&gt;
</p>
&lt;/form&gt;
&lt;/body&gt;
&lt;/html&gt;

web.xml

&lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&gt;
&lt;web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
	xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
	id="WebApp_ID" version="2.5"&gt;
	&lt;display-name&gt;SecurityJdbc&lt;/display-name&gt;
	&lt;welcome-file-list&gt;
		&lt;welcome-file&gt;login.jsp&lt;/welcome-file&gt;
	&lt;/welcome-file-list&gt;


	&lt;!-- Configuração do DataSource. --&gt;
	&lt;!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ --&gt;
	&lt;resource-ref&gt;
		&lt;description&gt;Web Database&lt;/description&gt;
		&lt;res-ref-name&gt;jdbc/stripessec&lt;/res-ref-name&gt;
		&lt;res-type&gt;javax.sql.DataSource&lt;/res-type&gt;
		&lt;res-auth&gt;Container&lt;/res-auth&gt;
	&lt;/resource-ref&gt;

	&lt;!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ --&gt;
	&lt;!-- Configuração da autenticação e autorização. --&gt;
	&lt;!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ --&gt;
	&lt;security-constraint&gt;
		&lt;display-name&gt;Área Restrita&lt;/display-name&gt;
		&lt;web-resource-collection&gt;
			&lt;web-resource-name&gt;Arquivos protegidos por login&lt;/web-resource-name&gt;
			&lt;url-pattern&gt;/jsp/*&lt;/url-pattern&gt;
		&lt;/web-resource-collection&gt;
		&lt;auth-constraint&gt;
			&lt;role-name&gt;systemuser&lt;/role-name&gt;
		&lt;/auth-constraint&gt;
	&lt;/security-constraint&gt;
	&lt;login-config&gt;
		&lt;auth-method&gt;FORM&lt;/auth-method&gt;
		&lt;realm-name&gt;StripesSecRealm&lt;/realm-name&gt;
		&lt;form-login-config&gt;
			&lt;form-login-page&gt;/login.jsp&lt;/form-login-page&gt;
			&lt;form-error-page&gt;/error.jsp&lt;/form-error-page&gt;
		&lt;/form-login-config&gt;
	&lt;/login-config&gt;
	&lt;security-role&gt;
		&lt;role-name&gt;systemuser&lt;/role-name&gt;
	&lt;/security-role&gt;
  
&lt;/web-app&gt;
#2