add ESAPI and Play protected views