config urlfilter in web.xml