Uncomment security-constraint and login-config in web.xml