title: blocking access to static content folders
body: <p>I want to know how to block access to the static content folders in my web-app. right the folders are in inside the web-root folder in the war. like so:</p>
  
  <pre>
      myapp/
  
         -css/
         -js/
         -swf/
           :
         WEB-INF/
  </pre>
  
  <p>I want the content to be visible only from the application when user is in a session. The content should be blocked if someone hits the url outside his/her session (after it has expired). </p>
  
  <p>Its a groovy-grails app with spring and we are using tomcat server.</p>