springbootdemo-tomcat11: add no-arg constructors to LoginRequest and TestwsRequest

Moshi (JsonRpcMessageReceiver) requires a no-arg constructor for POJO
deserialization. Without one, Moshi falls back to Unsafe.allocateInstance()
leaving fields null — LoginRequest.getEmail() returned null causing a 400,
and TestwsRequest.getMessagein() returned null causing ESAPI validation
to reject with FAILED status.

Mirrors the same fix already in the WildFly springbootdemo module.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: robertlazarski

modules/samples/userguide/src/userguide/springbootdemo-tomcat11/src/main/java/userguide/springboot/webservices/TestwsRequest.java

@@ -31,6 +31,9 @@ public void setMessagein(String messagein) {
         this.messagein = messagein;
     }
 
+    /** No-arg constructor required by Moshi (JsonRpcMessageReceiver) for deserialization. */
+    public TestwsRequest() {}
+
     public TestwsRequest(String messagein) {
         this.messagein = messagein;
     }

modules/samples/userguide/src/userguide/springbootdemo-tomcat11/src/main/java/userguide/springboot/webservices/secure/LoginRequest.java

@@ -42,6 +42,9 @@ public void setCredentials(String credentials) {
     }
 
 
+    /** No-arg constructor required by Moshi (JsonRpcMessageReceiver) for deserialization. */
+    public LoginRequest() {}
+
     public LoginRequest(String email, String credentials) {
         this.email = email;
         this.credentials = credentials;