cargo-jetty-7-and-onwards-deployer.war ships with no password protection. Instructions for enabling security are documented here:
The instructions say to "Uncomment the part of web.xml that says Uncomment in order to activate security."
The instructions don't mention that you must also add stuff to jetty-web.xml. I added this, to enable password protection: