Added Authorize & Callback, enabled http session, updated web.xml