The 2 properties files are located under WASCE_HOME/var/security: demo_groups.properties & demo_users.properties
Once this sample has been installed, click on Protect to validate against the properties file. You will be shown a login screen, use the following usernames and passwords to login:
username=alan password=starcraft
username=metro password=mouse
username=george password=bone
If everything works, you should see "hello world" in your browser.At this point you have an application that is validating username and passwords against the properties file based on the security configuration you provided earlier. Now, if you go back here and click on Forbidden you should receive a 403 - Forbidden HTTP error.