Hi Efrat
I have not gone through your code but from your web.xml, I can see that your form login page is at /faces/html/common/login.jsp so your URL
pattern should be
<filter-mapping>
<filter-name>LoginFilter</filter-name>
<url-pattern>/faces/html/common/j_security_check</url-pattern>
</filter-mapping>
[
Try this out, this should work. The j_security_check is actually called from this URL, I cant clearly explain this, but it'll be obvious if you remove your form error page you can see a 404 page with the URL /faces/html/common/j_security_check, you can probably undo all the code changes that you have done to correct this 'filter not getting invoked' problem]
-Hellkay