Add a custom web.xml to the auth war,
 which adds security constraint around fedora.
Auth war no longer allows any requests without authN

Resolves: https://www.pivotaltracker.com/story/show/66064942