Description
After going to the login screen for a java server faces application that uses j_security_check but waiting to until the session times out to login, the user is redirected to a blank page rather than the content or anything else useful.
Undertow is sending all the appropriate no-cache headers, and I also tested it Chrome by turning off the browser caching in the dev tools to make sure it wasn't a caching issue.