remove references to Apache Shiro