Someone

  <!-- MAKE TOMCAT FORCE SSL -->

  <security-constraint>
  <web-resource-collection>
  <web-resource-name>Protected Context</web-resource-name>
  <url-pattern>/*</url-pattern>
  </web-resource-collection>-->
  <!-- auth-constraint goes here if you requre authentication -->
  <user-data-constraint>
  <transport-guarantee>CONFIDENTIAL</transport-guarantee>
  </user-data-constraint>
  </security-constraint>