Hi,
Anything behind the WEB-INF directory is not browsable from the outside world. If you ensure that there is a welcome-file in the context directody - the default is index.html (I think) then the log in will automatically be sent to display this welcom-file rather than the directory listing.
Hope this might help.
kev