急！！！跪求jboss4.0下的问题

我在jboss4.0中配置了dukesbank，但是在进入系统前出现以下问题：

HTTP Status 400 - Invalid direct reference to form login page

---

type Status report

message Invalid direct reference to form login page

description The request sent by the client was syntactically incorrect (Invalid direct reference to form login page).

---

Apache Tomcat/5.0.28

我的web.xml配置是：
<?xml version="1.0" encoding="UTF-8"?>

<web-app xmlns="http://java.sun.com/xml/ns/j2ee" version="2.4"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
    <display-name>JBoss DukesBankWAR</display-name>
    <context-param>
        <param-name>javax.servlet.jsp.jstl.fmt.localizationContext</param-name>
        <param-value>WebMessages</param-value>
    </context-param>
    <servlet>
        <display-name>Dispatcher</display-name>
        <servlet-name>Dispatcher</servlet-name>
        <servlet-class>com.sun.ebank.web.Dispatcher</servlet-class>
    </servlet>
    <servlet-mapping>
        <servlet-name>Dispatcher</servlet-name>
        <url-pattern>/accountHist</url-pattern>
    </servlet-mapping>
    <servlet-mapping>
        <servlet-name>Dispatcher</servlet-name>
        <url-pattern>/accountList</url-pattern>
    </servlet-mapping>
    <servlet-mapping>
        <servlet-name>Dispatcher</servlet-name>
        <url-pattern>/atm</url-pattern>
    </servlet-mapping>
    <servlet-mapping>
        <servlet-name>Dispatcher</servlet-name>
        <url-pattern>/atmAck</url-pattern>
    </servlet-mapping>
    <servlet-mapping>
        <servlet-name>Dispatcher</servlet-name>
        <url-pattern>/main</url-pattern>
    </servlet-mapping>
    <servlet-mapping>
        <servlet-name>Dispatcher</servlet-name>
        <url-pattern>/transferAck</url-pattern>
    </servlet-mapping>
    <servlet-mapping>
        <servlet-name>Dispatcher</servlet-name>
        <url-pattern>/transferFunds</url-pattern>
    </servlet-mapping>
    <servlet-mapping>
        <servlet-name>Dispatcher</servlet-name>
        <url-pattern>/logoff</url-pattern>
    </servlet-mapping>
    <jsp-config>
        <jsp-property-group>
            <display-name>bank</display-name>
            <url-pattern>*.jsp</url-pattern>
            <el-ignored>false</el-ignored>
            <scripting-invalid>false</scripting-invalid>
            <is-xml>false</is-xml>
            <include-prelude>/template/prelude.jspf</include-prelude>
        </jsp-property-group>
    </jsp-config>

<security-constraint>
    <web-resource-collection>
      <web-resource-name>customerPages</web-resource-name>
      <description>no description</description>
      <url-pattern>/main</url-pattern>
      <url-pattern>/transferAck</url-pattern>
      <url-pattern>/transferFunds</url-pattern>
      <url-pattern>/atmAck</url-pattern>
      <url-pattern>/atm</url-pattern>
      <url-pattern>/accountList</url-pattern>
      <url-pattern>/accountHist</url-pattern>
      <http-method>GET</http-method>
      <http-method>POST</http-method>
    </web-resource-collection>
    <auth-constraint>
      <role-name>BankCustomer</role-name>
    </auth-constraint>
    <user-data-constraint>
      <description>no description</description>
      <transport-guarantee>NONE</transport-guarantee>
    </user-data-constraint>
  </security-constraint>
  <login-config>
    <auth-method>FORM</auth-method>
    <realm-name>Default</realm-name>
    <form-login-config>
      <form-login-page>/logon</form-login-page>
      <form-error-page>/logonError</form-error-page>
    </form-login-config>
  </login-config>
  <security-role>
    <role-name>BankCustomer</role-name>
  </security-role>
  
 <ejb-ref>
        <ejb-ref-name>ejb/accountController</ejb-ref-name>
        <ejb-ref-type>Session</ejb-ref-type>
        <home>com.sun.ebank.ejb.account.AccountControllerHome</home>
        <remote>com.sun.ebank.ejb.account.AccountController</remote>
    </ejb-ref>
    <ejb-ref>
        <ejb-ref-name>ejb/customerController</ejb-ref-name>
        <ejb-ref-type>Session</ejb-ref-type>
        <home>com.sun.ebank.ejb.customer.CustomerControllerHome</home>
        <remote>com.sun.ebank.ejb.customer.CustomerController</remote>
    </ejb-ref>
    <ejb-ref>
        <ejb-ref-name>ejb/txController</ejb-ref-name>
        <ejb-ref-type>Session</ejb-ref-type>
        <home>com.sun.ebank.ejb.tx.TxControllerHome</home>
        <remote>com.sun.ebank.ejb.tx.TxController</remote>
    </ejb-ref>
</web-app>

我的jboss-web.xml是：
<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE jboss-web PUBLIC
          "-//JBoss//DTD Web Application 2.3V2//EN"
          "http://www.jboss.org/j2ee/dtd/jboss-web_3_2.dtd">
<jboss-web>
    <!-- Uncomment this element to add security for the application -->
    <security-domain>java:/jaas/dukesbank</security-domain>

    <ejb-ref>
        <ejb-ref-name>ejb/accountController</ejb-ref-name>
        <jndi-name>MyAccountController</jndi-name>
    </ejb-ref>
    <ejb-ref>
        <ejb-ref-name>ejb/customerController</ejb-ref-name>
        <jndi-name>MyCustomerController</jndi-name>
    </ejb-ref>
    <ejb-ref>
        <ejb-ref-name>ejb/txController</ejb-ref-name>
        <jndi-name>MyTxController</jndi-name>
    </ejb-ref>
</jboss-web>
请问是怎么回事？需要在jboss或者是什么地方配置什么文件才能进入？？
急！！！！谢谢！！！