Moves showcase related JSPs under WEB-INF
Reverts security constraint