This week's book giveaway is in the Mac OS forum. We're giving away four copies of a choice of "Take Control of Upgrading to Yosemite" or "Take Control of Automating Your Mac" and have Joe Kissell on-line! See this thread for details.
Did you define a user.properties file with userid=password? I don't know how it works with apache, but with JBoss (which uses apache) you also have a role.properties file. In there, you define userid=role. Then the role shows-up in the web.xml where you define your protected components. You can say "is user in role" when in your servlet.