#124 added security information from web.xml