BZ-998296 Security review: multiple jbpm servlets have no security constraints applied - adding /editor/* url pattern
(cherry picked from commit 3b05e6a2106a5b8884a1c802692a8355e27ad68f)