shiro bazy + login controller