added velocity-*.jar to JarSkipPatterns
implemented security realms support for tomcat