Fixed security configuration for webapp.