change to extend 'AuthenticatingRealm' instead of 'AuthorizingRealm'.