fixes #444 - build manifest for web project based on pom.xml, and
including manifest map with values from manifest.mf (using interceptor)
refs #443 - allow to disable API authorization (and use for menus only)
(2.0)