DO NOT MERGE - Use Spring security rather than Shiro.

Tha's cool how you can call a method in the userAccess bean thing.