Since yesterday, Payara 4.1.2.174 #badassfish (build 192) is forcing to all my deployed apps to be accessed by https, I have some them that are re-directed by web.xml "security-constraint" tag and also must have a certificate provided by us, but we also have others that don't, after restarting the server all works fine but after an hour or 2, clients lose access but if the change to https:// and port 8181, some of them can log in again because the have our certificate (because they use other apps of us), but most can't.
I don't know what could I had modified to get this behaviour, but it needs to be fixed urgently