1. override web.xml in custom build 2. edit web.xml * remove security-constraints "Login" * remove LoginProxy, LoginServlet, LoginError, LoginRedirector, ... * remove servlet-mapping for above servlets