fix #4 : shiro security implemented