ralasafe secured的取值

官网下载ralasafe部署成功。
下面是问题描述：
web.xml
<servlet>
<servlet-name>ralasafe/StartupServlet</servlet-name>
<servlet-class> org.ralasafe.servlet.StartupServlet</servlet-class>
<init-param>
<param-name>repositoryDir</param-name>
<param-value>E:/vhosts/ralasafedemo/xml</param-value>
</init-param>
<init-param>
<param-name>secured</param-name>
<param-value>true</param-value>
</init-param>
<load-on-startup>4</load-on-startup>
</servlet>

当secured设置为false(默认为false)时，完全正常；
但是设置为true时。点击《给用户分配角色》报错：
[show] java.lang.NullPointerException

java.lang.NullPointerException
at org.ralasafe.servlet.UserMngServlet.doGet(UserMngServlet.java:57)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:119)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:96)
at com.caucho.server.dispatch.ServletFilterChain.doFilter(ServletFilterChain.java:109)
at filter.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:120)
at com.caucho.server.dispatch.FilterFilterChain.doFilter(FilterFilterChain.java:89)
at com.caucho.server.webapp.WebAppFilterChain.doFilter(WebAppFilterChain.java:156)
at com.caucho.server.webapp.AccessLogFilterChain.doFilter(AccessLogFilterChain.java:95)
at com.caucho.server.dispatch.ServletInvocation.service(ServletInvocation.java:287)
at com.caucho.server.hmux.HmuxRequest.handleInvocation(HmuxRequest.java:469)
at com.caucho.server.hmux.HmuxRequest.handleRequestImpl(HmuxRequest.java:374)
at com.caucho.server.hmux.HmuxRequest.handleRequest(HmuxRequest.java:340)
at com.caucho.network.listen.TcpSocketLink.dispatchRequest(TcpSocketLink.java:730)
at com.caucho.network.listen.TcpSocketLink.handleRequest(TcpSocketLink.java:689)
at com.caucho.network.listen.TcpSocketLink.handleRequestsImpl(TcpSocketLink.java:669)
at com.caucho.network.listen.TcpSocketLink.handleRequests(TcpSocketLink.java:617)
at com.caucho.network.listen.AcceptTask.doTask(AcceptTask.java:104)
at com.caucho.network.listen.ConnectionReadTask.runThread(ConnectionReadTask.java:98)
at com.caucho.network.listen.ConnectionReadTask.run(ConnectionReadTask.java:81)
at com.caucho.network.listen.AcceptTask.run(AcceptTask.java:67)
at com.caucho.env.thread.ResinThread.runTasks(ResinThread.java:164)
at com.caucho.env.thread.ResinThread.run(ResinThread.java:130)

其他测试功能，要选择用户的都是为空！！
怎么解决呀？求高手帮忙。下面的附件是我使用的demo