Refactor authentication path in web.xml