All Servlet Containers have built-in support for web  security layer.
you should go through your Jrun server  documentations on how to
deploy a sample security module on it. ( Jboss, and Tomcat has their
xml based configurations. )