no need to require servletcontext binding
drop custom RealmSecurityManager binding