working on tomcat auth