anchor.diff:  
   TODO: why doesn't login.jsp have to be in this list?
   
  +=== Enable the UberFire security CDI interceptors
  +
  +UberFire security relies in part on a pair of CDI interceptors which
  +verify the current user has permission to invoke a particular
  +operation (often this will be an RPC endpoint). CDI interceptors are
  +disabled by default, so you have to create a beans.xml file which
  +enables them:
  +
  +.Create src/main/webapp/WEB-INF/beans.xml
  +[source,xml]
  +------
  +<beans>
  +
  +  <interceptors>
  +    <class>org.uberfire.security.server.authz.cdi.RolesInterceptor</class>
  +    <class>org.uberfire.security.server.authz.cdi.TraitInterceptor</class>
  +  </interceptors>
  +
  +</beans>
  +------
  +
  +TODO: couldn't these be enabled by a beans.xml inside uberfire-security.jar?
  +
   At this point, we have fully configured UberFire Security.
   
   == Set up the VFS
  
positive.code:     menuBarPresenter.addMenus(menus);
    }
  
    private Command makeScreenCommand(final Class<?> screenClass) {
      return new Command() {
        @Override
        public void execute() {
          // screenClass.getName() works as a place name in our app
          // because we chose to name our screens after their FQCNs.
          // If you used arbitrary names for your screens, this won't work.
          placeManager.goTo(screenClass.getName());
        }
      };
    }
  
negative.code: 
  import org.uberfire.client.mvp.PlaceManager;
  import org.uberfire.client.workbench.Header;
  import org.uberfire.client.workbench.widgets.menu.WorkbenchMenuBarPresenter;
  import org.uberfire.mvp.Command;
  import org.uberfire.workbench.model.menu.MenuFactory;
  import org.uberfire.workbench.model.menu.Menus;
  