added security constraint to base web.xml file so it will be included when building
thalemine. once we release to the public, this will be removed.