shiro, realms, credential-matcher, user-service...