[Ala-portal] tomcat authentication