Force SSL if login/saml_login.protocol == https 


First commit adds the stock web.xml from Apache Tomcat 7.0.42.

If login.protocol=https, we enforce SSL using a security-constraint.