fix #442
Secured Metrics Servlet