wrong passwords to bypass SWF
tomcat conf is now externalized