Improve parsing of security constraints - accepts list of url-mappings and web-resource-collections
Fix catch msgs