http://www.infoq.com/articles/apache-shiro