renamed 'res://' to 'classpath:', implemented classpath-based keystore for tomcat