DO NOT MERGE - Use Spring security rather than Shiro.