User login information stored in MongoDB - custom authorization with Apache Shiro