DO NOT MERGE - Use Spring security rather than Shiro.

want to just delete this route?