Shuffled some things into WEB-INF so they don't get inadvertently served.