--- a/gwt-client/src/main/webapp/WEB-INF/web.xml	Tue Dec 16 12:48:25 2014 +0100
+++ b/gwt-client/src/main/webapp/WEB-INF/web.xml	Tue Dec 16 14:16:10 2014 +0100
@@ -24,6 +24,22 @@
     </context-param>
 
     <context-param>
+        <!-- URL to be redirected to when a user is not authenticated.
+             If this starts with http it is treated as an absolute url.
+             Otherwise it is interpreted as a relative page. -->
+        <param-name>unauth-redirect-url</param-name>
+        <param-value>/login.jsp</param-value>
+    </context-param>
+
+    <context-param>
+        <!-- Set this to disable the login page. Accessing the login
+             page will trigger a redirect to the unauth-redirect-url if
+             the unauth redirect is not the login page. -->
+        <param-name>disable-login</param-name>
+        <param-value>false</param-value>
+    </context-param>
+
+    <context-param>
         <param-name>authentication</param-name>
         <param-value>plain</param-value>
     </context-param>