proxypass the root context, excluding web asset paths
making the tomcat7 recipe a tad more idempotent