Save original web.xml before enabling security