tomcat hardening. xwiki add hibernate.cfg.xml