Changed Shiro for Spring Security. Seems to be playing a bit nicer.