Use shiro to stop anon accessing /

rather than coding isAuthenticated, use shiro