add shiro to controller authc