Well, since it's an online financial system, I'd wanted to create something more generic. To make sure security is "turned on" by default.
I don't want to expect maintainers to have to think about security too much when they are modifying pages. After all, security bugs are easy to create and hard to find.
[Message sent by forum member 'jkva' (jkva)]
http://forums.java.net/jive/thread.jspa?messageID=345830