add secutiry-constraint in web.xml for force to use https in configuration interface