changes to web.xml to accept https requests