removing legacy web.xml security constraints