completely turn off session creation for shiro

fixes #215