Add test parameter on app.json
Ebabled security on web.xml