Disable Servlet security by default ...