[CB,HB]{other} web.xml - added security constraints to force HTTPS