Add security constraints to StateService

* Manifest.mf
 * Jboss 7 uses modules for class loading so it is important to add those
   modules not running by default to the webapp's classpath. In this case,
   jboss's version of ws.cxf. The 'services' pragma means use the services
   API for accessing the module while 'export' makes the module available
   to our code.

* web.xml
 * The addition of the role in the security-constraint produces a warning
   message about said role not being defined. This corrects that warning

* StateService
 * The WebContext annotation has moved in jboss 7

* Wildcard role not allowed in JBoss 7
 * JBoss 7 puts servlets into a more strict mode that does not allow any
   authenticated user but only those assigned to specific roles. Thus, it
   is necessary to add the roles to the web.xml for the wsdl to be displayed.
 * see https://community.jboss.org/message/617196#617196#617196 for details
Profile security additions

 * Adds the security credentials from the profile to the state service
   data source