Deploying WAR with web.xml and sun-web.xml security