<jboss-web>
   <!-- Set the security domain and specify that the cache for a specific user will 
        be flushed on session invalidation. This means that changes made to the user's
        password in the database will become immediately available once the user logs out -->
   <security-domain flushOnSessionInvalidation="true">java:/jaas/PhotoXChange</security-domain>
</jboss-web>
