Added security framework - part 1
added filter to web.xml