enable basic auth via param only (no web.xml or tomcat-users.xml necessary), param renaming