complete shiro authentication with hashed password.