- disabled the SessionManager of Shiro