fix AbstractFacade
fix Shiro jdbc userRolesQuery
enforce security on all taskflows