Add security filter in web.xml