update auth flow and maven tomcat deploy