An optional tag used in a <web-resource-collection> to list HTTP methods which are protected.
If none are defined, all methods are protected (recommended).
Example, to only protect GET methods:
<http-method>GET</http-method>