https://www.javacodegeeks.com/2016/02/java-ee-security-api-moving-forward.html