shift to java-based config + fix for logout path resolution when it's not just servlet path :-(