Due to tomcat 6.0.41 new security settings we cannot reference a local web-app.dtd. Rolling back to standard url-based dtd.