@Deployment(testable = false)
public static WebArchive createDeployment() {
    WebArchive war = ShrinkWrap.create(WebArchive.class)
            .addClass(SecureServlet.class)
            .addAsResource(new File("src/main/resources/log4j.properties"))
            .addAsWebInfResource((new File("src/main/webapp/WEB-INF/web.xml")));

    System.out.println(war.toString(true));
    return war;
}

@Test
public void testGetMethod() throws Exception {
    webClient.setCredentialsProvider(correctCreds);
    TextPage page = webClient.getPage(base + "/SecureServlet");
    assertEquals("my GET", page.getContent());
}

@Test
public void testPostMethod() throws Exception {
    webClient.setCredentialsProvider(correctCreds);
    WebRequest request = new WebRequest(new URL(base + "SecureServlet"), HttpMethod.POST);
    try {
        TextPage p = webClient.getPage(request);
        System.out.println(p.getContent());
    } catch (FailingHttpStatusCodeException e) {
        assertNotNull(e);
        assertEquals(403, e.getStatusCode());
        return;
    }
    fail("POST method could be called even with deny-unocvered-http-methods");
}

@Test
public void testPutMethod() throws Exception {
    webClient.setCredentialsProvider(correctCreds);
    WebRequest request = new WebRequest(new URL(base + "SecureServlet"), HttpMethod.PUT);
    try {
        TextPage p = webClient.getPage(request);
        System.out.println(p.getContent());
    } catch (FailingHttpStatusCodeException e) {
        assertNotNull(e);
        assertEquals(403, e.getStatusCode());
        return;
    }
    fail("PUT method could be called even with deny-unocvered-http-methods");
}