final authentication working

remove of pax.shiro
change on the custom realm functions

this solution only provides authentication
authorisation will be done inside application