DO NOT USE THIS INSTANCE FOR LIVE DATA!!!!
If an empty username or password is passed in via HTTP Basic authentication, Shiro throws an IllegalStateException.