ok..
Don't you think there shall be an error as well because of wrong placement of
<role-name>manager</role-name>
<auth-constraint>
</auth-constraint>
<role-name>manager</role-name>
</security-constraint>
and because
<web-resource-name>Sensitive</web-resource-name>
is same in both the constraints?