differentiate beta and prod hotdeployr recipies
have tomcat admin tools around to verify undeploy
add manager and basic auth for it
put tomcat-users info somewhere else than public S3