Add webapp descriptors and security domain