The actions are always loaded when sitemap is used
Thus the service method of the WebAuthenticateAction is used event in safemode
This lead to an error in logs (while loading some resources?)

Non blocking, I can still use the admin.

I also see this

        if (_staticUserPopulationDAO == null)
        {
            _staticUserPopulationDAO = (UserPopulationDAO) smanager.lookup(UserPopulationDAO.ROLE);
        }

that will not reload the component on restard

moreover remove the "static" in the variable name.