Where is the action j_security_check implemented? Is the form submitting to a
servlet? How is the 2nd jsp getting displayed? Is the request getting dispatched to the 2nd jsp?
Request object is specific to a request. What is likely happening is that the form is getting submitted & its request is being processed (perhaps in a servlet) & the servlet is displaying the next jsp. The 2nd jsp will not have access to the request object of the 1st jsp unless you forward the request & response objects via the RequestDispatcher.
If you are using a servlet you can do the following:
getServletContext().getRequestDispatcher(urlForJSP).forward(request, response)