Adding security to a web application using JEE 6 Security