Added Nimble and Shiro for user authentication.  Added { excludes servlet-api } for nible to remove contentType = response.getContentType() error.