Shiro: log in user from OAuth2 token.