Updated sample project with a protected web.xml configuration and a JavaScript popup trying to display the document cookie