use jdbc realm for user authentication