shiro默认filter的执行顺序:
OncePerRequestFilter
CharacterEncodingFilter
WebMvcMetricsFilter
FormContentFilter
XssFilter