Shiro works when you try to access `/lists`

    TRACE 2012-04-24 11:40:53,351 [qtp1033140423-22] org.apache.shiro.web.filter.PathMatchingFilter: Attempting to match pattern '/login' with current requestURI '/lists'...
    TRACE 2012-04-24 11:40:53,351 [qtp1033140423-22] org.apache.shiro.web.filter.authc.FormAuthenticationFilter: Attempting to access a path which requires authentication.  Forwarding to the Authentication url [/login]

But, when the login form is submitted the redirect to `/unauthorized` never happens. Note, the login submission is detected:

    TRACE 2012-04-24 11:44:03,659 [qtp1033140423-25] org.apache.shiro.web.filter.authc.FormAuthenticationFilter: Login submission detected.  Attempting to execute login.
    TRACE 2012-04-24 11:44:03,661 [qtp1033140423-25] org.apache.shiro.util.ThreadContext: get() - in thread [qtp1033140423-25]
    TRACE 2012-04-24 11:44:03,662 [qtp1033140423-25] org.apache.shiro.util.ThreadContext: Retrieved value of type [org.apache.shiro.web.subject.support.WebDelegatingSubject] for key [org.apache.shiro.util.ThreadContext_SUBJECT_KEY] bound to thread [qtp1033140423-25]<br>
    TRACE 2012-04-24 11:44:03,662 [qtp1033140423-25] org.apache.shiro.subject.support.DelegatingSubject: attempting to get session; create = false; session is null = false; session has id = true
    TRACE 2012-04-24 11:44:03,662 [qtp1033140423-25] org.apache.shiro.authc.AbstractAuthenticator: Authentication attempt received for token [org.apache.shiro.authc.UsernamePasswordToken - null, rememberMe=false (0:0:0:0:0:0:0:1%0)]
    DEBUG 2012-04-24 11:44:03,664 [qtp1033140423-25] org.apache.shiro.realm.AuthenticatingRealm: Looked up AuthenticationInfo [matt] from doGetAuthenticationInfo
    DEBUG 2012-04-24 11:44:03,664 [qtp1033140423-25] org.apache.shiro.realm.AuthenticatingRealm: AuthenticationInfo caching is disabled for info [matt].  Submitted token: [org.apache.shiro.authc.UsernamePasswordToken - null, rememberMe=false (0:0:0:0:0:0:0:1%0)].
    TRACE 2012-04-24 11:44:03,665 [qtp1033140423-25] org.apache.shiro.web.servlet.SimpleCookie: calculated path: /
    DEBUG 2012-04-24 11:44:03,665 [qtp1033140423-25] org.apache.shiro.web.servlet.SimpleCookie: Added HttpServletResponse Cookie [rememberMe=deleteMe; Path=/; Max-Age=0; Expires=Mon, 23-Apr-2012 15:44:03 GMT]<br>
    TRACE 2012-04-24 11:44:03,665 [qtp1033140423-25] org.apache.shiro.web.servlet.SimpleCookie: Removed 'rememberMe' cookie by setting maxAge=0<br>
    TRACE 2012-04-24 11:44:03,665 [qtp1033140423-25] org.apache.shiro.web.servlet.AdviceFilter: Invoked preHandle method.  Continuing chain?: [true]
    TRACE 2012-04-24 11:44:03,665 [qtp1033140423-25] org.apache.shiro.web.servlet.ProxiedFilterChain: Invoking original filter chain.