https://waylau.gitbooks.io/apache-shiro-1-2-x-reference/content/