fark it, drop jaas. remove user mgmt from web too