started integrating apache shiro for authentication and authorization
purposes