tidied up dependencies to mininize number of jars
more tidying, removed PasswordHash
refactored to separate web from shiro implementation