Include Apache Shiro for authorization

Fixes #78.