Apache Tomcat role authorisation against AD2003