#4 Upgrade shiro plugin, prevent illegalstateexceptions being sent after session timeout