Merge "remove <security-constraint> from web.xml"