Updated web.xml for multiple protected folders