Ensure the configuration for tomcat and spring boot web are locked down in order to avoid misconfiguration based exploits