DO NOT MERGE - Use Spring security rather than Shiro.

So these commented out routes are replaced by the /loginError route?