added web.xml enabling authentication.