1) Accept username and password entry by a non-loggedin user on any page.
2) Use the "enabledOnUserRole" attribute of the Tomahawk tags.3) Use a database to that contains authentication and authorization information. I am currently using Form base authentication with the database for the non-JSF based application.
Paul Spencer

