If we want more pages to be SSO protected, web.xml must be changed and the change requires a restart of the web server.

I would be useful, if we can specify the protected pages somewhere else and it will not require the restart for the changes to take effect.

This issue enhances ORG-1298.