Starting to work on authentication via shiro. Setup realm implementation that uses user/group definitions and colleague relationships to establish permissions (and store roles), added a LoginFilter that's VERY bare-bones at the moment, and added security checks to all data controllers.