basic authentication is on web.xml
basic auth stuff