Security ModuleClassLoaderLocator.CombinedClassLoader does not implement getResources, this causes calls to getResources(String) from a login module to not find resources which exist.
Verified in EAP 6.4.6.CP.CR2.
Retroactively bulk-closing issues from released EAP 6.4 cumulative patches.