Shiro security. Almost working