sample using pax-shiro-cdi-web