Wee tweak to passwords and web.xml to make JAAS auth work.