[rules-users] Drools BRMS security when deployed on Tomcat