[jboss-jira] [JBoss JIRA] (SECURITY-920) The web.xml of the toolkit needs to specify both SPNEGO and Form authentication.