SSO kerberos + nginx + tomcat xwiki

[slava]

It sends queries to ldap for each request because X-Xwiki-User is set.