Using credentials in Portlets/Servlets