Hamak Waddle

This is my login page http://example.com:7070/abc (though it actually uses 8080) but I didn't want people to login except a few admins. And the urls must not be restricted. Problem is I have been having login attempts which the boss doesn't like and so he didnt want anybody else accessing this page but the admins.

I would like to create restrictions as follows in Tomcat:

Restrict this page..... http://example.com:7070/abc

But still give access to all to urls such as http://example.com:7070/abc/personId=ioiedqw990,Password=mypasswd

or anything else falling under http://example.com:7070/abc