JAAS or JDBCRealm Authentication ?