User Access control config using shiro annoations.
Merge branch 'master' into filterconfig
HTTP 403 when unauthorised

And moved to the ExceptionController, not in HomeController, to make it consistent with the other errors.
minor stylist review changes

no big deal
Merge branch 'filterconfig'