uninstall oauth plugin
use shiro for security framework