[PAXWEB-622] - Multiple url-patterns in web.xml are incorrectly parsed in security-constraint.
---
this also contains a last fix
and integration test