added security constraint on web.xml
added skeleton for JWT