With the latest changes, it turns out emptySessionPath="true", which is needed for JBoss Portal compatibility, is a good default setting, and provides fully functional cross context functionality (at least, as far as my newly found understanding of this part of the specification goes).