crash<->shiro binding
fix #25 - convert from shiro to Spring Security