Also, has an application-policy been added to login-config.xml?
It is not necessary to set up JAWS if you are not using CMP 1.1 entity beans.