Form based authentication problem

[Jonathan James]

I'm trying to get the Java Petstore 1.1.1 (the new one) working with Orion. I've read some previous posts and the docs and everything is working except that on my login.jsp I have to use <form action="j_security_check" method=GET> instead of <form action="j_security_check" method=POST> as it is supposed to be. This ends up putting the password in the URL. Why doesn't POST work with with j_security_check?   Thanks   Jonathan