updated web.xml to use the correct security realm