Rework handling of default shell authentication method in the absence of Spring Security

In case Spring Security is missing from the class path, shell auto configuration will now fall back gracefully to simple authentication and emit warning to the console.

fixes #114