Added support for Shiro annotations (#4)

* scan for annotations and emit appropriate security checks in the handler.
* generate appropriate HTTP responses based on security context.
* log in user from OAuth2 token.