Fix notLoggedIn redirect check.

If Shiro's remember me services are turned on then a subject can have a principal without being logged in.  When this happens ShiroUnauthorizedComponentListener redirects to the unauthorized page instead of to the login page.  This pull request changes the notLoggedIn check to see whether the subject isAuthenticated() instead of whether it has a non-null principal, allowing it to redirect to the login page.