changed web.xml for security filter