fix(webapp): url matcher for authorized engine harded

can now handle wars with app in archive name (my-camunda-webapp.war)