[jboss-as7-dev] web security extensions