ctx.setDescriptor(webInfLocation);
}
// configure security to avoid err println "Null identity service, trying login service:"
// but I've found no way to get rid of LoginService=xxx log on system err :(
HashLoginService loginService = new HashLoginService();
loginService.setIdentityService(new DefaultIdentityService());
ctx.getSecurityHandler().setLoginService(loginService);
ctx.getSecurityHandler().setIdentityService(loginService.getIdentityService());
ctx.addLifeCycleListener(new AbstractLifeCycle.AbstractLifeCycleListener() {
@Override