Support tomcat users

@bmuschko As we discussed in #107, supporting configure basic authentication user

closes #107
This will likely blow up as it need to get the Thread-context classloader. I can have a look at it so don't worry about it.