Improve security of JMXservlet
- localhost is always allowed
- token can be provided
- check for session (e.g. for Monex) so a logged in(=authorized) user can use the application