DO NOT MERGE - Use Spring security rather than Shiro.

@terenceingram  this is where those deleted login routes are defined now.