Shiro Role-Permission system using JPA