change to use specific auth manager to allow for use of http security in
applications using sherpa-spring