some schema change and reorg, adding apache Shiro for registration passwords