Hey, yesterday at Java Forum Stuttgart there was a pretty good talk about Java-Web-Security http://files.dominikschadow.de/event_jfs2015.pdf I think there is certainly some content in there that may be interesting for hawkular as well.