Uncomment security-constraint and login-config in web.xml
- changed cdn url to https since our wildcard certificate is now installed
- commented out <html:base> tag so relative URLs for css/js work under https on begin page (also somewhat insecure)