Initial security implementation with shiro