Add application-security.xml and test jsp pages