CORE-2812: add a servlet that can be used to create an access denied page