Remove auth from web.xml
Fixed rest/pom.xml to exclude xalan again
Keep mvn happy
Get httpServletRequest in metadata app
access defined for an object field should affect all its children
Fix web.xml