Keycloak and web.xml setup to permit access to the endpoints