- added some session features to the AuthServlet
- configured the ShiroAuthManager