My web.xml looks like:
Omit the element in for resources for which you don't need authentication like:
app /info app /* Role