modified web.xml for shiro support