disabled basic authentication in web.xml (else tests fail)