shiro_securityManager的注入

@Bean
	@ConditionalOnMissingBean
    DefaultWebSecurityManager securityManager(AuthRealm authRealm) {
		DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
		securityManager.setRealm(authRealm);
		// 为了提供无状态的Restful Service，需要禁用Shiro的Session持久化功能
		((DefaultSessionStorageEvaluator) ((DefaultSubjectDAO) securityManager.getSubjectDAO()).getSessionStorageEvaluator())
				.setSessionStorageEnabled(false);
		return securityManager;
	}