It would be handy to have a mechanism for setting HTTP session timeouts, registering filters etc globally across all deployments. This concept could later on be expanded to cover global interceptors and similar. Perhaps in the form of web.xml/ejb-jar.xml files in a specific folder that would be merged at deployment time