Ignoring and creating an anonymous (session-less) Subject instance. org.apache.shiro.session.UnknownSessionException