Disable login-config and security-role in web.xml by default
This will make it work for Jetty too.