[rules-users] Authentication using Tomcat