authentication working with security in the web xml ;)