[NEXUS-6316] upgrade to shiro 1.2.3