Tomcat Access control to files/directories