[tomcat] update for tomcat6 and add password filtering

Signed-off-by: Bryn M. Reeves <bmr@redhat.com>