https://csn.net4me.net/cyber_security_11560.html
Improper Authentication in Apache Shiro