cleaning up / WEB-INF location issue hacked