Upstream JIRA: https://java.net/jira/browse/JAVASERVERFACES-3531

Was fixed in 2.1.29 (r13370 in https://svn.java.net/svn/mojarra~svn/tags/2.1.29/).  EAP 6.4 has 2.1.28.
(The fix changes com.sun.faces.context.flash.ELFlash to not call isSecure since it doesn't work correctly until JSF 2.2).

The JIRA says it was introduced in 2.1.24, which we pulled in EAP 6.2.2.

Caused by: java.lang.UnsupportedOperationException
  at javax.faces.context.ExternalContext.isSecure(ExternalContext.java:1932) [jboss-jsf-api_2.1_spec-2.1.28.Final-redhat-1.jar:2.1.28.Final-redhat-1]
  at com.sun.faces.context.flash.ELFlash.setCookie(ELFlash.java:956) [jsf-impl-2.1.28.redhat-8.jar:2.1.28.redhat-8]
  at com.sun.faces.context.flash.ELFlash.doLastPhaseActions(ELFlash.java:638) [jsf-impl-2.1.28.redhat-8.jar:2.1.28.redhat-8]
  at com.sun.faces.context.ExternalContextImpl.redirect(ExternalContextImpl.java:581) [jsf-impl-2.1.28.redhat-8.jar:2.1.28.redhat-8]
  at org.apache.deltaspike.jsf.impl.listener.request.DeltaSpikeExternalContextWrapper.redirect(DeltaSpikeExternalContextWrapper.java:56) [deltaspike-jsf-module-impl-ee6-1.4.1.jar:1.4.1]
  at com.sun.faces.application.NavigationHandlerImpl.handleNavigation(NavigationHandlerImpl.java:180) [jsf-impl-2.1.28.redhat-8.jar:2.1.28.redhat-8]
  at org.apache.deltaspike.jsf.impl.config.view.navigation.ViewConfigAwareNavigationHandler.handleNavigation(ViewConfigAwareNavigationHandler.java:146) [deltaspike-jsf-module-impl-ee6-1.4.1.jar:1.4.1]
  at org.apache.deltaspike.jsf.impl.scope.viewaccess.ViewAccessScopedAwareNavigationHandler.handleNavigation(ViewAccessScopedAwareNavigationHandler.java:51) [deltaspike-jsf-module-impl-ee6-1.4.1.jar:1.4.1]
  at org.apache.deltaspike.jsf.impl.navigation.DeltaSpikeNavigationHandler.handleNavigation(DeltaSpikeNavigationHandler.java:77) [deltaspike-jsf-module-impl-ee6-1.4.1.jar:1.4.1]
  at org.apache.deltaspike.jsf.impl.config.view.navigation.DefaultViewNavigationHandler.navigateTo(DefaultViewNavigationHandler.java:41) [deltaspike-jsf-module-impl-ee6-1.4.1.jar:1.4.1]
  at org.apache.deltaspike.jsf.impl.config.view.navigation.DefaultViewNavigationHandler$Proxy$_$$_WeldClientProxy.navigateTo(DefaultViewNavigationHandler$Proxy$_$$_WeldClientProxy.java) [deltaspike-jsf-module-impl-ee6-1.4.1.jar:1.4.1]
  at com.jboss.examples.web.LoginBean.logout(LoginController.java:123) [classes:]