Login e Logout com JSF 2, JBoss AS 7 e MySQL

package br.com.dpv.ui.listeners;

import javax.faces.application.NavigationHandler;
import javax.faces.context.FacesContext;
import javax.faces.event.PhaseEvent;
import javax.faces.event.PhaseId;
import javax.faces.event.PhaseListener;
import javax.servlet.http.HttpSession;


public class LoginPhaseListener implements PhaseListener {

	private static final long serialVersionUID = 1L;

	public void afterPhase(PhaseEvent event) {

		FacesContext facesContext = event.getFacesContext();
		String currentPage = facesContext.getViewRoot().getViewId();

		boolean isLoginPage = (currentPage.lastIndexOf("login.xhtml") > -1);
		HttpSession session = (HttpSession) facesContext.getExternalContext().getSession(true);
		Object currentUser = session.getAttribute("usuario");

		if (!isLoginPage && currentUser == null) {
			NavigationHandler nh = facesContext.getApplication().getNavigationHandler();
			nh.handleNavigation(facesContext, null, "login");
			//System.out.println("nao logado, pagina atual: " + currentPage);
		} else {
			//System.out.println("logado, pagina atual:" + currentPage);
		}
	}

	public void beforePhase(PhaseEvent event) {

	}

	public PhaseId getPhaseId() {
		return PhaseId.RESTORE_VIEW;
	}
}

package br.com.dpv.ui.view;

import java.io.Serializable;

import javax.enterprise.context.RequestScoped;
import javax.faces.application.FacesMessage;
import javax.faces.context.FacesContext;
import javax.inject.Inject;
import javax.inject.Named;

import br.com.dpv.domain.services.vendedor.VendedorService;
import br.com.dpv.domain.vo.Vendedor;

@Named("loginMB")
@RequestScoped
public class LoginMB implements Serializable {

	private static final long serialVersionUID = -7417099367748111549L;

	private String usuario, 
				   senha;

	@Inject
	private VendedorService vendedorService;

	public String login() {
		String paginaDestino = null;
		FacesContext context = FacesContext.getCurrentInstance();

		try {
			Vendedor user = vendedorService.isUsuarioLogado(usuario, senha);

			if (user != null) {

				context.getExternalContext().getSessionMap().put("usuario", user);

				paginaDestino = "pedidos";
			} 
			else {
				FacesMessage msg = new FacesMessage("Login inv�lido!");
				msg.setSeverity(FacesMessage.SEVERITY_ERROR);
				context.addMessage(null, msg);
			}
		} 
		catch (Exception ex) {
			FacesMessage msg = new FacesMessage("Erro fatal: " + ex.getMessage());
			msg.setSeverity(FacesMessage.SEVERITY_FATAL);
			context.addMessage(null, msg);
			ex.printStackTrace();
		}

		return paginaDestino;
	}

	public String getUsuario() {
		return usuario;
	}

	public void setUsuario(String usuario) {
		this.usuario = usuario;
	}

	public String getSenha() {
		return senha;
	}

	public void setSenha(String senha) {
		this.senha = senha;
	}
}

<lifecycle>
		<phase-listener>br.com.dpv.ui.listeners.LoginPhaseListener</phase-listener>
	</lifecycle>