diff --git a/scm-plugin-backend/src/main/webapp/WEB-INF/web.xml b/scm-plugin-backend/src/main/webapp/WEB-INF/web.xml
index 535d015510..74529d06ae 100644
--- a/scm-plugin-backend/src/main/webapp/WEB-INF/web.xml
+++ b/scm-plugin-backend/src/main/webapp/WEB-INF/web.xml
@@ -31,22 +31,42 @@
 
 
 -->
-<web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
-    <listener>
-        <listener-class>sonia.scm.plugin.BackendContextListener</listener-class>
-    </listener>
-    <filter>
-        <filter-name>guiceFilter</filter-name>
-        <filter-class>com.google.inject.servlet.GuiceFilter</filter-class>
-    </filter>
-    <filter-mapping>
-        <filter-name>guiceFilter</filter-name>
-        <url-pattern>/*</url-pattern>
-    </filter-mapping>
-    <welcome-file-list>
-        <welcome-file>index.html</welcome-file>
-    </welcome-file-list>
-    <session-config>
-        <session-timeout>30</session-timeout>
-    </session-config>
+<web-app version="2.5" 
+         xmlns="http://java.sun.com/xml/ns/javaee" 
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
+         xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
+  
+  <listener>
+    <listener-class>sonia.scm.plugin.BackendContextListener</listener-class>
+  </listener>
+  
+  <filter>
+    <filter-name>guiceFilter</filter-name>
+    <filter-class>com.google.inject.servlet.GuiceFilter</filter-class>
+  </filter>
+  
+  <filter-mapping>
+    <filter-name>guiceFilter</filter-name>
+    <url-pattern>/*</url-pattern>
+  </filter-mapping>
+  
+  <welcome-file-list>
+    <welcome-file>redirect.html</welcome-file>
+  </welcome-file-list>
+  
+  <session-config>
+    <session-timeout>30</session-timeout>
+  </session-config>
+  
+  <security-constraint>
+    <display-name>Restrict XHTML Documents</display-name>
+    <web-resource-collection>
+      <web-resource-name>XHTML</web-resource-name>
+      <url-pattern>*.ftl</url-pattern>
+    </web-resource-collection>
+    <auth-constraint>
+      <role-name>none</role-name>
+    </auth-constraint>
+  </security-constraint>
+
 </web-app>
diff --git a/scm-plugin-backend/src/main/webapp/redirect.html b/scm-plugin-backend/src/main/webapp/redirect.html
new file mode 100644
index 0000000000..ce57f97ec7
--- /dev/null
+++ b/scm-plugin-backend/src/main/webapp/redirect.html
@@ -0,0 +1,8 @@
+<!DOCTYPE html>
+<html>
+  <head>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
+    <meta http-equiv="refresh" content="0;url=page/index.html">     
+  </head>
+  <body></body>
+</html>
\ No newline at end of file
diff --git a/scm-plugin-backend/src/main/webapp/template/header.html b/scm-plugin-backend/src/main/webapp/template/header.html
index 294ae057cd..be102a1145 100644
--- a/scm-plugin-backend/src/main/webapp/template/header.html
+++ b/scm-plugin-backend/src/main/webapp/template/header.html
@@ -35,7 +35,7 @@
 <html>
   <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
-
+    
     <title>SCM-Manager Plugin-Backend</title>
     <link rel="stylesheet" type="text/css" media="all" href="${contextPath}/template/css/style.css" />
     <link rel="stylesheet" type="text/css" media="all" href="https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.16/themes/ui-lightness/jquery-ui.css" />
@@ -44,7 +44,6 @@
     <!--[if lt IE 9]>
       <script src="${contextPath}template/js/html5.js"></script>
     <![endif]-->
-    
     <base href="${contextPath}" />
   </head>
   <body class="home page page-id-8 page-template-default logged-in admin-bar layout-2cr">
