Tomcat manager with Spring security filter