working web.xml and security when running java jar