<login-config>
    <auth-method>FORM</auth-method>
    <form-login-config>
            <form-login-page>/login.jsp</form-login-page>
    <form-error-page>/loginError.jsp</form-error-page>
</form-login-config>

<session-config>
  <session-timeout>5</session-timeout>
  </session-config>

 <security-role>
    <role-name>user</role-name>
 </security-role>

<security-constraint>
  <web-resource-collection>
   <web-resource-name>J2EEApp</web-resource-name>
   <description> accessible by authorised users </description>
  <url-pattern>/user/*</url-pattern>
  <http-method>PUT</http-method>
   <http-method>DELETE</http-method>
   <http-method>GET</http-method>
   <http-method>POST</http-method>
  </web-resource-collection>
  <auth-constraint>
    <description>These are the roles who have access</description>
    <role-name>user</role-name>
  </auth-constraint>
</security-constraint>

<security-constraint>
  <web-resource-collection>
   <web-resource-name>GuestPages</web-resource-name>
   <description> accessible by un-authorised users </description>
   <url-pattern>/guest/*</url-pattern>
  </web-resource-collection>
</security-constraint>

</web-app>

<div id="container">
 <jsp:include page="header.jsp"></jsp:include>
 <div id="body">
<form method="post" id="post" action="j_security_check" name="input">
<label id ="label">Username<sup>*</sup> </label>
<input id ="input" type="text" name="j_username" value=""><br><br>
<label id="label">Password<sup>*</sup> </label>
<input id="input" type="password" name="j_password" value=""><br><br>
<input id="input" type="submit" name="submit" value="login">
<a id="link" href="${pageContext.request.contextPath}/guest/menu">Guest</a>
</form>
</div>

<Realm className="org.apache.catalina.realm.UserDatabaseRealm"
           resourceName="UserDatabase">
  </Realm>

<role rolename="user"/>
  <user username="shubham" password="shubham" roles="user"/>
  <user username="user1" password="user1" roles="user"/>