@Path("auth")
public boolean authUser(String userName, String userPassword) {
boolean result = this.domain.authUser(userName, userPassword);
if (result) {
UserRole userRole = new UserRole();
User user = new User();
List<Role> roles = this.listUserRoles(userName);
userRole.setUser(user);
userRole.setRoles(roles);
//缓存当前用户的权限信息