Removed security roles, constraints, and login-config from web.xml
Removed security roles, constraints, and login-config from web.xml

Our base install should get to assume no authentication, especially for a 'tomcat' role.
Installations that desire authentication should configure it themselves.

OSERAF/MASTERImpl,OSERAF/MASTERImpl,OSERAF/MASTERImpl