fixing jetty and tomcat security with farms