Moves jsps under WEB-INF
Adds security constraints to block access to jsp files