restore old web.xml without basic auth