Clean up the WEB.XML
Auth using ROLES and ANNOTATIONS.
Update the README with instructions.