added authentication with shiro