diff --git a/src/main/java/com/jfinalbbs/common/BaseController.java b/src/main/java/com/jfinalbbs/common/BaseController.java
index 76bfcf86f..e941733fc 100644
--- a/src/main/java/com/jfinalbbs/common/BaseController.java
+++ b/src/main/java/com/jfinalbbs/common/BaseController.java
@@ -49,6 +49,7 @@ public void clearCache(String cacheName, Object cacheKey) {
 
     /**
      * 根据用户令牌获取用户信息
+     *
      * @param token
      * @return
      */
@@ -58,6 +59,7 @@ public User getUser(String token) {
 
     /**
      * 根据用户名查询后台用户
+     *
      * @return
      */
     public AdminUser getAdminUser() {
diff --git a/src/main/java/com/jfinalbbs/common/BaseModel.java b/src/main/java/com/jfinalbbs/common/BaseModel.java
index 9a6c59940..557ce2f6e 100644
--- a/src/main/java/com/jfinalbbs/common/BaseModel.java
+++ b/src/main/java/com/jfinalbbs/common/BaseModel.java
@@ -15,7 +15,7 @@ public class BaseModel<T extends Model> extends Model<T> {
 
     public String formatDate(Date date) {
         String dateStr = "";
-        if(date != null) {
+        if (date != null) {
             PrettyTime prettyTime = new PrettyTime(Locale.CHINA);
             dateStr = prettyTime.format(date);
         }
diff --git a/src/main/java/com/jfinalbbs/common/JFinalbbsConfig.java b/src/main/java/com/jfinalbbs/common/JFinalbbsConfig.java
index dd6e46155..b216263b6 100644
--- a/src/main/java/com/jfinalbbs/common/JFinalbbsConfig.java
+++ b/src/main/java/com/jfinalbbs/common/JFinalbbsConfig.java
@@ -9,7 +9,6 @@
 import com.jfinal.kit.HashKit;
 import com.jfinal.kit.PathKit;
 import com.jfinal.kit.PropKit;
-import com.jfinal.plugin.activerecord.ActiveRecordPlugin;
 import com.jfinal.plugin.druid.DruidPlugin;
 import com.jfinal.plugin.ehcache.EhCachePlugin;
 import com.jfinal.render.FreeMarkerRender;
diff --git a/src/main/java/com/jfinalbbs/interceptor/ClientInterceptor.java b/src/main/java/com/jfinalbbs/interceptor/ClientInterceptor.java
index 8aff74e02..c8a947301 100644
--- a/src/main/java/com/jfinalbbs/interceptor/ClientInterceptor.java
+++ b/src/main/java/com/jfinalbbs/interceptor/ClientInterceptor.java
@@ -17,14 +17,14 @@ public class ClientInterceptor implements Interceptor {
     public void intercept(Invocation inv) {
         String token = inv.getController().getPara("token");
         Result result = new Result(Constants.CODE_SUCCESS, Constants.DESC_SUCCESS, null);
-        if(StrUtil.isBlank(token)) {
+        if (StrUtil.isBlank(token)) {
             result.setCode(Constants.CODE_FAILURE);
             result.setDescription("用户令牌不能为空");
             inv.getController().renderJson(result);
         } else {
             //验证token 的合法性
             User user = User.me.findByToken(token);
-            if(user == null) {
+            if (user == null) {
                 result.setCode(Constants.CODE_FAILURE);
                 result.setDescription("用户令牌无效");
                 inv.getController().renderJson(result);
diff --git a/src/main/java/com/jfinalbbs/module/collect/CollectClientController.java b/src/main/java/com/jfinalbbs/module/collect/CollectClientController.java
index 1c9b77afb..9595e2175 100644
--- a/src/main/java/com/jfinalbbs/module/collect/CollectClientController.java
+++ b/src/main/java/com/jfinalbbs/module/collect/CollectClientController.java
@@ -22,9 +22,9 @@ public class CollectClientController extends BaseController {
 
     public void index() {
         String tid = getPara("tid");
-        if(StrUtil.isBlank(tid)) {
+        if (StrUtil.isBlank(tid)) {
             error("话题id不能为空");
-        } else if(Topic.me.findById(tid) == null) {
+        } else if (Topic.me.findById(tid) == null) {
             error("无效话题");
         } else {
             String token = getPara("token");
@@ -48,9 +48,9 @@ public void index() {
 
     public void delete() {
         String tid = getPara("tid");
-        if(StrUtil.isBlank(tid)) {
+        if (StrUtil.isBlank(tid)) {
             error("话题id不能为空");
-        } else if(Topic.me.findById(tid) == null) {
+        } else if (Topic.me.findById(tid) == null) {
             error("无效话题");
         } else {
             String token = getPara("token");
diff --git a/src/main/java/com/jfinalbbs/module/index/IndexClientController.java b/src/main/java/com/jfinalbbs/module/index/IndexClientController.java
index 49641eba1..9c468922c 100644
--- a/src/main/java/com/jfinalbbs/module/index/IndexClientController.java
+++ b/src/main/java/com/jfinalbbs/module/index/IndexClientController.java
@@ -22,7 +22,7 @@ public void index() {
         }
         Page<Topic> page = Topic.me.paginate(getParaToInt("p", 1),
                 getParaToInt("size", defaultPageSize()), tab, q, 1, l);
-        for(Topic t : page.getList()) {
+        for (Topic t : page.getList()) {
 //            t.set("content", )
         }
         success(page);
diff --git a/src/main/java/com/jfinalbbs/module/index/IndexController.java b/src/main/java/com/jfinalbbs/module/index/IndexController.java
index cab8b0919..f6003a261 100644
--- a/src/main/java/com/jfinalbbs/module/index/IndexController.java
+++ b/src/main/java/com/jfinalbbs/module/index/IndexController.java
@@ -15,7 +15,6 @@
 import com.jfinalbbs.utils.DateUtil;
 import com.jfinalbbs.utils.EmailSender;
 import com.jfinalbbs.utils.StrUtil;
-import com.jfinalbbs.utils.ext.plugin.shiro.ShiroKit;
 import com.jfinalbbs.utils.ext.route.ControllerBind;
 import org.apache.shiro.SecurityUtils;
 import org.apache.shiro.authc.AuthenticationException;
@@ -46,11 +45,11 @@ public void index() {
             tab = "all";
             setAttr("_label", Label.me.findById(l));
         }
-        if(tab.equals("all") || tab.equals("good")) {
+        if (tab.equals("all") || tab.equals("good")) {
             setAttr("sectionName", "板块");
         } else {
             Section section = Section.me.findByTab(tab);
-            setAttr("sectionName", section!=null?section.get("name"):"板块");
+            setAttr("sectionName", section != null ? section.get("name") : "板块");
         }
         Page<Topic> page = Topic.me.paginate(getParaToInt("p", 1),
                 getParaToInt("size", defaultPageSize()), tab, q, 1, l);
diff --git a/src/main/java/com/jfinalbbs/module/label/Label.java b/src/main/java/com/jfinalbbs/module/label/Label.java
index 4924841fc..96c3646c3 100644
--- a/src/main/java/com/jfinalbbs/module/label/Label.java
+++ b/src/main/java/com/jfinalbbs/module/label/Label.java
@@ -49,10 +49,10 @@ public List<Topic> findByLabels(String id, List<Label> labels, int limit) {
         }
         labels_str = labels_str.substring(0, labels_str.length() - 1);
         List<LabelTopicId> labelTopicIds = LabelTopicId.me.find(
-                "select * from jfbbs_label_topic_id where lid in ("+labels_str+");");
-        if(labelTopicIds.size() > 0) {
+                "select * from jfbbs_label_topic_id where lid in (" + labels_str + ");");
+        if (labelTopicIds.size() > 0) {
             String topics_id_str = "";
-            for(LabelTopicId labelTopicId: labelTopicIds) {
+            for (LabelTopicId labelTopicId : labelTopicIds) {
                 topics_id_str += "'" + labelTopicId.getStr("tid") + "',";
             }
             topics_id_str = topics_id_str.substring(0, topics_id_str.length() - 1);
diff --git a/src/main/java/com/jfinalbbs/module/label/LabelClientController.java b/src/main/java/com/jfinalbbs/module/label/LabelClientController.java
index 60fdd5df2..69d23257a 100644
--- a/src/main/java/com/jfinalbbs/module/label/LabelClientController.java
+++ b/src/main/java/com/jfinalbbs/module/label/LabelClientController.java
@@ -18,14 +18,14 @@ public class LabelClientController extends BaseController {
 
     public void index() {
         String name = getPara("name");
-        if(StrUtil.isBlank(name)) {
+        if (StrUtil.isBlank(name)) {
             List<Label> labels = Label.me.findAll();
             setAttr("labels", labels);
             success(labels);
         } else {
             Label label = Label.me.findByName(name);
             Page<Topic> page = null;
-            if(label != null) {
+            if (label != null) {
                 page = Topic.me.paginate(getParaToInt("p", 1),
                         getParaToInt("size", defaultPageSize()), null, null, 1, label.getInt("id"));
             }
diff --git a/src/main/java/com/jfinalbbs/module/label/LabelController.java b/src/main/java/com/jfinalbbs/module/label/LabelController.java
index c351ad4e3..99524bcd9 100644
--- a/src/main/java/com/jfinalbbs/module/label/LabelController.java
+++ b/src/main/java/com/jfinalbbs/module/label/LabelController.java
@@ -21,7 +21,7 @@ public class LabelController extends BaseController {
 
     public void index() throws UnsupportedEncodingException {
         String name = getPara(0);
-        if(StrUtil.isBlank(name)) {
+        if (StrUtil.isBlank(name)) {
             List<Label> labels = Label.me.findAll();
             setAttr("labels", labels);
             render("front/label/list.ftl");
@@ -29,7 +29,7 @@ public void index() throws UnsupportedEncodingException {
             name = URLDecoder.decode(name, "UTF-8");
             Label label = Label.me.findByName(name);
             setAttr("label", label);
-            if(label != null) {
+            if (label != null) {
                 Page<Topic> page = Topic.me.paginate(getParaToInt("p", 1),
                         getParaToInt("size", defaultPageSize()), null, null, 1, label.getInt("id"));
                 setAttr("page", page);
diff --git a/src/main/java/com/jfinalbbs/module/message/MsgContact.java b/src/main/java/com/jfinalbbs/module/message/MsgContact.java
index fe5b475fe..b14fa41a8 100644
--- a/src/main/java/com/jfinalbbs/module/message/MsgContact.java
+++ b/src/main/java/com/jfinalbbs/module/message/MsgContact.java
@@ -19,6 +19,7 @@ public MsgContact findByAuthorIdAndToAuthorId(String authorId, String toAuthorId
 
     /**
      * 根据用户id查询此用户的会话列表
+     *
      * @param authorId
      * @return
      */
diff --git a/src/main/java/com/jfinalbbs/module/message/MsgMessageClientController.java b/src/main/java/com/jfinalbbs/module/message/MsgMessageClientController.java
index f7a9a2bd3..0741e38c1 100644
--- a/src/main/java/com/jfinalbbs/module/message/MsgMessageClientController.java
+++ b/src/main/java/com/jfinalbbs/module/message/MsgMessageClientController.java
@@ -125,7 +125,7 @@ public void delete() {
         Integer contactId = getParaToInt("contactId");
         if (contactId != null) {
             MsgContact msgContact = MsgContact.me.findById(contactId);
-            if(msgContact != null) {
+            if (msgContact != null) {
                 msgContact.set("is_delete", 1).update();
             }
         }
diff --git a/src/main/java/com/jfinalbbs/module/message/MsgMessageController.java b/src/main/java/com/jfinalbbs/module/message/MsgMessageController.java
index e9c70f9dc..19776ffcd 100644
--- a/src/main/java/com/jfinalbbs/module/message/MsgMessageController.java
+++ b/src/main/java/com/jfinalbbs/module/message/MsgMessageController.java
@@ -132,7 +132,7 @@ public void delete() {
         Integer contactId = getParaToInt(0);
         if (contactId != null) {
             MsgContact msgContact = MsgContact.me.findById(contactId);
-            if(msgContact != null) {
+            if (msgContact != null) {
                 msgContact.set("is_delete", 1).update();
                 redirect("/message");
             }
diff --git a/src/main/java/com/jfinalbbs/module/topic/Topic.java b/src/main/java/com/jfinalbbs/module/topic/Topic.java
index 20507c388..e06d320ed 100644
--- a/src/main/java/com/jfinalbbs/module/topic/Topic.java
+++ b/src/main/java/com/jfinalbbs/module/topic/Topic.java
@@ -43,7 +43,7 @@ public Page<Topic> paginate(int pageNumber, int pageSize, String tab, String q,
         }
         if (!StrKit.isBlank(tab) && tab.equals("good")) {
             condition.append(" and t.good = 1 ");
-        } else if(!StrKit.isBlank(tab) && tab.equals("noreply")) {
+        } else if (!StrKit.isBlank(tab) && tab.equals("noreply")) {
             condition.append(" and t.id not in (select tid from jfbbs_reply) ");
         }
         if (!StrKit.isBlank(tab) && (tab.equals("all") || tab.equals("good") || tab.equals("noreply"))) {
diff --git a/src/main/java/com/jfinalbbs/module/topic/TopicAdminController.java b/src/main/java/com/jfinalbbs/module/topic/TopicAdminController.java
index ca9426eb8..f65b75c7c 100644
--- a/src/main/java/com/jfinalbbs/module/topic/TopicAdminController.java
+++ b/src/main/java/com/jfinalbbs/module/topic/TopicAdminController.java
@@ -14,9 +14,7 @@
 import com.jfinalbbs.module.user.User;
 import com.jfinalbbs.utils.StrUtil;
 import com.jfinalbbs.utils.ext.route.ControllerBind;
-import org.apache.shiro.SecurityUtils;
 import org.apache.shiro.authz.annotation.RequiresPermissions;
-import org.apache.shiro.subject.Subject;
 
 import java.io.IOException;
 import java.util.Date;
diff --git a/src/main/java/com/jfinalbbs/module/topic/TopicClientController.java b/src/main/java/com/jfinalbbs/module/topic/TopicClientController.java
index 8874ee8c9..64a056948 100644
--- a/src/main/java/com/jfinalbbs/module/topic/TopicClientController.java
+++ b/src/main/java/com/jfinalbbs/module/topic/TopicClientController.java
@@ -113,14 +113,14 @@ public void delete() {
         String tid = getPara("tid");
         String token = getPara("token");
         User user = getUser(token);
-        if(StrUtil.isBlank(tid)) {
+        if (StrUtil.isBlank(tid)) {
             error("话题id不能为空");
         } else {
             Topic topic = Topic.me.findById(tid);
-            if(topic == null) {
+            if (topic == null) {
                 error("话题不存在");
             } else {
-                if(user.get("id").equals(topic.get("author_id"))) {
+                if (user.get("id").equals(topic.get("author_id"))) {
                     //删除关联的标签
                     LabelTopicId.me.deleteByTid(tid);
                     topic.delete();
diff --git a/src/main/java/com/jfinalbbs/module/topic/TopicController.java b/src/main/java/com/jfinalbbs/module/topic/TopicController.java
index eb6cdbe6e..a86d1ad61 100644
--- a/src/main/java/com/jfinalbbs/module/topic/TopicController.java
+++ b/src/main/java/com/jfinalbbs/module/topic/TopicController.java
@@ -36,7 +36,7 @@ public void index() {
             List<Label> labels = Label.me.findByTid(id);
             setAttr("labels", labels);
             //根据当前话题的标签查询相关话题
-            if(labels.size() > 0) {
+            if (labels.size() > 0) {
                 List<Topic> xgTopics = Label.me.findByLabels(id, labels, 10);
                 setAttr("xgTopics", xgTopics);
             }
@@ -67,7 +67,7 @@ public void index() {
     @Before(UserInterceptor.class)
     public void create() {
         String labelName = getPara(0);
-        if(!StrUtil.isBlank(labelName)) {
+        if (!StrUtil.isBlank(labelName)) {
             Label label = Label.me.findByName(labelName);
             setAttr("label", label);
         }
diff --git a/src/main/java/com/jfinalbbs/module/user/AdminUser.java b/src/main/java/com/jfinalbbs/module/user/AdminUser.java
index 9d48a77ba..c3ad4a137 100644
--- a/src/main/java/com/jfinalbbs/module/user/AdminUser.java
+++ b/src/main/java/com/jfinalbbs/module/user/AdminUser.java
@@ -25,7 +25,7 @@ public void correlationRole(Integer userId, Integer[] roles) {
         //先删除已经存在的关联
         Db.update("delete from jfbbs_user_role where uid = ?", userId);
         //建立新的关联关系
-        for(Integer rid : roles) {
+        for (Integer rid : roles) {
             UserRole userRole = new UserRole();
             userRole.set("uid", userId)
                     .set("rid", rid)
diff --git a/src/main/java/com/jfinalbbs/module/user/AdminUserAdminController.java b/src/main/java/com/jfinalbbs/module/user/AdminUserAdminController.java
index f6164d448..fff4be81a 100644
--- a/src/main/java/com/jfinalbbs/module/user/AdminUserAdminController.java
+++ b/src/main/java/com/jfinalbbs/module/user/AdminUserAdminController.java
@@ -9,7 +9,6 @@
 import com.jfinalbbs.utils.StrUtil;
 import com.jfinalbbs.utils.ext.route.ControllerBind;
 import org.apache.shiro.SecurityUtils;
-import org.apache.shiro.authc.UsernamePasswordToken;
 import org.apache.shiro.authz.annotation.RequiresPermissions;
 import org.apache.shiro.subject.Subject;
 
@@ -34,7 +33,7 @@ public void index() {
     @Before(Tx.class)
     public void add() {
         String method = getRequest().getMethod();
-        if(method.equalsIgnoreCase(Constants.GET)) {
+        if (method.equalsIgnoreCase(Constants.GET)) {
             setAttr("roles", Role.me.findAll());
             render("add.ftl");
         } else {
@@ -57,7 +56,7 @@ public void add() {
     public void edit() {
         Integer id = getParaToInt("id");
         String method = getRequest().getMethod();
-        if(method.equalsIgnoreCase(Constants.GET)) {
+        if (method.equalsIgnoreCase(Constants.GET)) {
             setAttr("adminUser", AdminUser.me.findById(id));
             setAttr("roles", Role.me.findAll());
             setAttr("uroles", UserRole.me.findByUserId(id));
@@ -69,7 +68,7 @@ public void edit() {
             adminUser.set("id", id)
                     .set("username", username)
                     .set("in_time", new Date());
-            if(StrUtil.notBlank(password)) {
+            if (StrUtil.notBlank(password)) {
                 adminUser.set("password", password);
                 PasswordHelper passwordHelper = new PasswordHelper();
                 passwordHelper.encryptPassword(adminUser);
@@ -88,7 +87,7 @@ public void edit() {
     @Before(Tx.class)
     public void delete() {
         Integer id = getParaToInt("id");
-        if(id == null) {
+        if (id == null) {
             renderError(500);
         } else {
             AdminUser.me.deleteById(id);
@@ -103,13 +102,13 @@ public void modifypwd() {
         Subject subject = SecurityUtils.getSubject();
         String username = subject.getPrincipal().toString();
         String method = getRequest().getMethod();
-        if(method.equalsIgnoreCase(Constants.GET)) {
+        if (method.equalsIgnoreCase(Constants.GET)) {
             AdminUser adminUser = AdminUser.me.findByUsername(username);
             setAttr("adminUser", adminUser);
             render("modifypwd.ftl");
-        } else if(method.equalsIgnoreCase(Constants.POST)) {
+        } else if (method.equalsIgnoreCase(Constants.POST)) {
             String password = getPara("password");
-            if(StrUtil.isBlank(password)) {
+            if (StrUtil.isBlank(password)) {
                 setAttr("errMsg", "密码不能为空");
                 render("modifypwd.ftl");
             } else {
diff --git a/src/main/java/com/jfinalbbs/module/user/Permission.java b/src/main/java/com/jfinalbbs/module/user/Permission.java
index 1c043e141..059e3c185 100644
--- a/src/main/java/com/jfinalbbs/module/user/Permission.java
+++ b/src/main/java/com/jfinalbbs/module/user/Permission.java
@@ -22,7 +22,7 @@ public List<Permission> findByPid(Object pid) {
 
     public List<Permission> findAll() {
         List<Permission> permissions = this.findByPid(0);
-        for(Permission p: permissions) {
+        for (Permission p : permissions) {
             List<Permission> permissionList = this.findByPid(p.get("id"));
             p.put("childPermission", permissionList);
         }
@@ -32,9 +32,9 @@ public List<Permission> findAll() {
     public Set<String> findPermissions(String username) {
         List<Permission> permissions = super.findByCache(Constants.SHIROCACHE, Constants.PERMISSIONCACHEKEY + username,
                 "select p.* from jfbbs_admin_user u, jfbbs_role r, jfbbs_permission p, " +
-                "jfbbs_user_role ur, jfbbs_role_permission rp where u.id = ur.uid and r.id = ur.rid and r.id = rp.rid and p.id = rp.pid and u.username = ?", username);
+                        "jfbbs_user_role ur, jfbbs_role_permission rp where u.id = ur.uid and r.id = ur.rid and r.id = rp.rid and p.id = rp.pid and u.username = ?", username);
         Set<String> set = new HashSet<String>();
-        for(Permission p: permissions) {
+        for (Permission p : permissions) {
             set.add(p.getStr("name"));
         }
         return set;
diff --git a/src/main/java/com/jfinalbbs/module/user/PermissionAdminController.java b/src/main/java/com/jfinalbbs/module/user/PermissionAdminController.java
index 8070b05bc..b9c6db1cf 100644
--- a/src/main/java/com/jfinalbbs/module/user/PermissionAdminController.java
+++ b/src/main/java/com/jfinalbbs/module/user/PermissionAdminController.java
@@ -20,7 +20,7 @@ public class PermissionAdminController extends BaseController {
     public void index() {
         Integer permissionId = getParaToInt("permissionId");
         List<Permission> permissions = Permission.me.findAll();
-        if(permissionId == null) {
+        if (permissionId == null) {
             Permission permission = permissions.get(0);
             permissionId = permission.getInt("id");
         }
diff --git a/src/main/java/com/jfinalbbs/module/user/Role.java b/src/main/java/com/jfinalbbs/module/user/Role.java
index 1add6a51c..ac43cdd0b 100644
--- a/src/main/java/com/jfinalbbs/module/user/Role.java
+++ b/src/main/java/com/jfinalbbs/module/user/Role.java
@@ -30,7 +30,7 @@ public Set<String> findRoles(String username) {
         List<Role> roles = super.findByCache(Constants.SHIROCACHE, Constants.ROLECACHEKEY + username,
                 "select r.* from jfbbs_admin_user u, jfbbs_role r, jfbbs_user_role ur where u.id = ur.uid and r.id = ur.rid and u.username = ?", username);
         Set<String> set = new HashSet<String>();
-        for(Role r: roles) {
+        for (Role r : roles) {
             set.add(r.getStr("name"));
         }
         return set;
@@ -40,7 +40,7 @@ public void correlationPermission(Integer roleId, Integer[] permissionIds) {
         //先删除已经存在的关联
         Db.update("delete from jfbbs_role_permission where rid = ?", roleId);
         //建立新的关联关系
-        for(Integer pid : permissionIds) {
+        for (Integer pid : permissionIds) {
             RolePermission rolePermission = new RolePermission();
             rolePermission.set("rid", roleId)
                     .set("pid", pid)
diff --git a/src/main/java/com/jfinalbbs/module/user/RoleAdminController.java b/src/main/java/com/jfinalbbs/module/user/RoleAdminController.java
index 888b937f5..b00baee3c 100644
--- a/src/main/java/com/jfinalbbs/module/user/RoleAdminController.java
+++ b/src/main/java/com/jfinalbbs/module/user/RoleAdminController.java
@@ -8,11 +8,6 @@
 import com.jfinalbbs.utils.ext.route.ControllerBind;
 import org.apache.shiro.authz.annotation.RequiresPermissions;
 
-import java.util.ArrayList;
-import java.util.HashMap;
-import java.util.List;
-import java.util.Map;
-
 /**
  * Created by Tomoya.
  * Copyright (c) 2016, All Rights Reserved.
@@ -31,10 +26,10 @@ public void index() {
     @Before(Tx.class)
     public void add() {
         String method = getRequest().getMethod();
-        if(method.equalsIgnoreCase(Constants.GET)) {
+        if (method.equalsIgnoreCase(Constants.GET)) {
             setAttr("permissions", Permission.me.findAll());
             render("add.ftl");
-        } else if(method.equalsIgnoreCase(Constants.POST)){
+        } else if (method.equalsIgnoreCase(Constants.POST)) {
             Role role = getModel(Role.class);
             role.save();
             Integer[] pids = getParaValuesToInt("permissions");
@@ -46,9 +41,9 @@ public void add() {
     @RequiresPermissions("setting:role")
     public void edit() {
         String method = getRequest().getMethod();
-        if(method.equalsIgnoreCase(Constants.GET)) {
+        if (method.equalsIgnoreCase(Constants.GET)) {
             Integer id = getParaToInt("id");
-            if(id != null) {
+            if (id != null) {
                 Role role = Role.me.findById(id);
                 setAttr("role", role);
                 setAttr("permissions", Permission.me.findAll());
@@ -58,7 +53,7 @@ public void edit() {
                 LogKit.error("角色ID不能为空");
                 renderError(500);
             }
-        } else if(method.equalsIgnoreCase(Constants.POST)) {
+        } else if (method.equalsIgnoreCase(Constants.POST)) {
             Role role = getModel(Role.class);
             role.update();
             Integer[] pids = getParaValuesToInt("permissions");
@@ -73,7 +68,7 @@ public void edit() {
     @Before(Tx.class)
     public void delete() {
         Integer roleId = getParaToInt("id");
-        if(roleId == null) {
+        if (roleId == null) {
             renderError(500);
         } else {
             Role.me.deleteById(roleId);
diff --git a/src/main/java/com/jfinalbbs/module/user/UserClientController.java b/src/main/java/com/jfinalbbs/module/user/UserClientController.java
index bcd97b8c0..b255b3fda 100644
--- a/src/main/java/com/jfinalbbs/module/user/UserClientController.java
+++ b/src/main/java/com/jfinalbbs/module/user/UserClientController.java
@@ -42,7 +42,7 @@ public void index() {
     public void userinfo() {
         String token = getPara("token");
         User user = getUser(token);
-        if(user == null) {
+        if (user == null) {
             error("无效令牌");
         } else {
             User resultUser = new User();
diff --git a/src/main/java/com/jfinalbbs/module/user/credentials/RetryLimitHashedCredentialsMatcher.java b/src/main/java/com/jfinalbbs/module/user/credentials/RetryLimitHashedCredentialsMatcher.java
index 89dec3cfb..87b834ead 100644
--- a/src/main/java/com/jfinalbbs/module/user/credentials/RetryLimitHashedCredentialsMatcher.java
+++ b/src/main/java/com/jfinalbbs/module/user/credentials/RetryLimitHashedCredentialsMatcher.java
@@ -26,21 +26,21 @@ public RetryLimitHashedCredentialsMatcher() {
 
     @Override
     public boolean doCredentialsMatch(AuthenticationToken token, AuthenticationInfo info) {
-        String username = (String)token.getPrincipal();
+        String username = (String) token.getPrincipal();
         //retry count + 1
         Element element = passwordRetryCache.get(username);
-        if(element == null) {
-            element = new Element(username , new AtomicInteger(0));
+        if (element == null) {
+            element = new Element(username, new AtomicInteger(0));
             passwordRetryCache.put(element);
         }
-        AtomicInteger retryCount = (AtomicInteger)element.getObjectValue();
-        if(retryCount.incrementAndGet() > 5) {
+        AtomicInteger retryCount = (AtomicInteger) element.getObjectValue();
+        if (retryCount.incrementAndGet() > 5) {
             //if retry count > 5 throw
             throw new ExcessiveAttemptsException();
         }
 
         boolean matches = super.doCredentialsMatch(token, info);
-        if(matches) {
+        if (matches) {
             //clear retry count
             passwordRetryCache.remove(username);
         }
diff --git a/src/main/java/com/jfinalbbs/module/user/realm/UserRealm.java b/src/main/java/com/jfinalbbs/module/user/realm/UserRealm.java
index 61dfa1bb1..5c5ec25cb 100644
--- a/src/main/java/com/jfinalbbs/module/user/realm/UserRealm.java
+++ b/src/main/java/com/jfinalbbs/module/user/realm/UserRealm.java
@@ -19,7 +19,7 @@ public class UserRealm extends AuthorizingRealm {
 
     @Override
     protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
-        String username = (String)principals.getPrimaryPrincipal();
+        String username = (String) principals.getPrimaryPrincipal();
 
         SimpleAuthorizationInfo authorizationInfo = new SimpleAuthorizationInfo();
         authorizationInfo.setRoles(Role.me.findRoles(username));
@@ -30,11 +30,11 @@ protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principal
 
     @Override
     protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
-        String username = (String)token.getPrincipal();
+        String username = (String) token.getPrincipal();
 
         AdminUser adminUser = AdminUser.me.findByUsername(username);
 
-        if(adminUser == null) {
+        if (adminUser == null) {
             throw new UnknownAccountException();//没找到帐号
         }
 
diff --git a/src/main/java/com/jfinalbbs/utils/EmailSender.java b/src/main/java/com/jfinalbbs/utils/EmailSender.java
index f3533b026..d8cf90e38 100644
--- a/src/main/java/com/jfinalbbs/utils/EmailSender.java
+++ b/src/main/java/com/jfinalbbs/utils/EmailSender.java
@@ -28,7 +28,7 @@ public class EmailSender {
     private static EmailSender emailSender;
 
     public static EmailSender getInstance() {
-        if(emailSender == null) {
+        if (emailSender == null) {
             emailSender = new EmailSender();
         }
         return emailSender;
diff --git a/src/main/java/com/jfinalbbs/utils/ext/kit/ClassSearcher.java b/src/main/java/com/jfinalbbs/utils/ext/kit/ClassSearcher.java
index fa7238d13..4fb4e0d1f 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/kit/ClassSearcher.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/kit/ClassSearcher.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, kidzhou 周磊 (zhouleib1412@gmail.com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
diff --git a/src/main/java/com/jfinalbbs/utils/ext/kit/Reflect.java b/src/main/java/com/jfinalbbs/utils/ext/kit/Reflect.java
index bbb7aa14a..b7af0fcd1 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/kit/Reflect.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/kit/Reflect.java
@@ -1,26 +1,26 @@
 /**
  * Copyright (c) 2011-2013, Lukas Eder, lukas.eder@gmail.com
  * All rights reserved.
- *
+ * <p>
  * This software is licensed to you under the Apache License, Version 2.0
  * (the "License"); You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are met:
- *
+ * <p>
  * . Redistributions of source code must retain the above copyright notice, this
- *   list of conditions and the following disclaimer.
- *
+ * list of conditions and the following disclaimer.
+ * <p>
  * . Redistributions in binary form must reproduce the above copyright notice,
- *   this list of conditions and the following disclaimer in the documentation
- *   and/or other materials provided with the distribution.
- *
+ * this list of conditions and the following disclaimer in the documentation
+ * and/or other materials provided with the distribution.
+ * <p>
  * . Neither the name "jOOR" nor the names of its contributors may be
- *   used to endorse or promote products derived from this software without
- *   specific prior written permission.
- *
+ * used to endorse or promote products derived from this software without
+ * specific prior written permission.
+ * <p>
  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
  * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
@@ -35,13 +35,7 @@
  */
 package com.jfinalbbs.utils.ext.kit;
 
-import java.lang.reflect.AccessibleObject;
-import java.lang.reflect.Constructor;
-import java.lang.reflect.Field;
-import java.lang.reflect.InvocationHandler;
-import java.lang.reflect.Method;
-import java.lang.reflect.Modifier;
-import java.lang.reflect.Proxy;
+import java.lang.reflect.*;
 import java.util.Arrays;
 import java.util.LinkedHashMap;
 import java.util.Map;
@@ -226,7 +220,7 @@ public Reflect set(String name, Object value) throws ReflectException {
      * @see #field(String)
      */
     public <T> T get(String name) throws ReflectException {
-        return field(name).<T> get();
+        return field(name).<T>get();
     }
 
     /**
@@ -551,7 +545,7 @@ public Object invoke(Object proxy, Method method, Object[] args) throws Throwabl
             }
         };
 
-        return (P) Proxy.newProxyInstance(proxyType.getClassLoader(), new Class[] { proxyType }, handler);
+        return (P) Proxy.newProxyInstance(proxyType.getClassLoader(), new Class[]{proxyType}, handler);
     }
 
     /**
diff --git a/src/main/java/com/jfinalbbs/utils/ext/kit/ReflectException.java b/src/main/java/com/jfinalbbs/utils/ext/kit/ReflectException.java
index af1184223..dcef6b020 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/kit/ReflectException.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/kit/ReflectException.java
@@ -1,26 +1,26 @@
 /**
  * Copyright (c) 2011-2013, Lukas Eder, lukas.eder@gmail.com
  * All rights reserved.
- *
+ * <p>
  * This software is licensed to you under the Apache License, Version 2.0
  * (the "License"); You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are met:
- *
+ * <p>
  * . Redistributions of source code must retain the above copyright notice, this
- *   list of conditions and the following disclaimer.
- *
+ * list of conditions and the following disclaimer.
+ * <p>
  * . Redistributions in binary form must reproduce the above copyright notice,
- *   this list of conditions and the following disclaimer in the documentation
- *   and/or other materials provided with the distribution.
- *
+ * this list of conditions and the following disclaimer in the documentation
+ * and/or other materials provided with the distribution.
+ * <p>
  * . Neither the name "jOOR" nor the names of its contributors may be
- *   used to endorse or promote products derived from this software without
- *   specific prior written permission.
- *
+ * used to endorse or promote products derived from this software without
+ * specific prior written permission.
+ * <p>
  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
  * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/AbstractAuthzHandler.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/AbstractAuthzHandler.java
index 85f8aa744..2f13ae31e 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/AbstractAuthzHandler.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/AbstractAuthzHandler.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, dafei 李飞 (myaniu AT gmail DOT com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -24,11 +24,11 @@
  */
 abstract class AbstractAuthzHandler implements AuthzHandler {
 
-	/**
-	 * 获得Shiro的Subject对象。
-	 * @return
-	 */
-	 protected Subject getSubject() {
-	     return SecurityUtils.getSubject();
-	 }
+    /**
+     * 获得Shiro的Subject对象。
+     * @return
+     */
+    protected Subject getSubject() {
+        return SecurityUtils.getSubject();
+    }
 }
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/AuthenticatedAuthzHandler.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/AuthenticatedAuthzHandler.java
index 1dcc72942..ac0034fef 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/AuthenticatedAuthzHandler.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/AuthenticatedAuthzHandler.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, dafei 李飞 (myaniu AT gmail DOT com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -27,17 +27,18 @@
  */
 class AuthenticatedAuthzHandler extends AbstractAuthzHandler {
 
-	private static AuthenticatedAuthzHandler aah = new AuthenticatedAuthzHandler();
+    private static AuthenticatedAuthzHandler aah = new AuthenticatedAuthzHandler();
 
-	private AuthenticatedAuthzHandler(){}
+    private AuthenticatedAuthzHandler() {
+    }
 
-	public static  AuthenticatedAuthzHandler me(){
-		return aah;
-	}
+    public static AuthenticatedAuthzHandler me() {
+        return aah;
+    }
 
-	public void assertAuthorized() throws AuthorizationException {
-		if (!getSubject().isAuthenticated() ) {
-            throw new UnauthenticatedException( "The current Subject is not authenticated.  Access denied." );
+    public void assertAuthorized() throws AuthorizationException {
+        if (!getSubject().isAuthenticated()) {
+            throw new UnauthenticatedException("The current Subject is not authenticated.  Access denied.");
         }
-	}
+    }
 }
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/AuthzHandler.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/AuthzHandler.java
index ce86e0234..0e5017179 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/AuthzHandler.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/AuthzHandler.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, dafei 李飞 (myaniu AT gmail DOT com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -23,9 +23,9 @@
  *
  */
 interface AuthzHandler {
-	/**
-	 * 访问控制检查
-	 * @throws AuthorizationException 授权异常
-	 */
-	public void assertAuthorized()throws AuthorizationException;
+    /**
+     * 访问控制检查
+     * @throws AuthorizationException 授权异常
+     */
+    public void assertAuthorized() throws AuthorizationException;
 }
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ClearShiro.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ClearShiro.java
index 273609ef1..21a25ee98 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ClearShiro.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ClearShiro.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, dafei 李飞 (myaniu AT gmail DOT com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -15,11 +15,7 @@
  */
 package com.jfinalbbs.utils.ext.plugin.shiro;
 
-import java.lang.annotation.ElementType;
-import java.lang.annotation.Inherited;
-import java.lang.annotation.Retention;
-import java.lang.annotation.RetentionPolicy;
-import java.lang.annotation.Target;
+import java.lang.annotation.*;
 
 /**
  * 用来清除所有的Shiro访问控制注解，适合于Controller绝大部分方法都需要做访问控制，个别不需要做访问控制的场合。
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/CompositeAuthzHandler.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/CompositeAuthzHandler.java
index 6874fc055..a27d6d280 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/CompositeAuthzHandler.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/CompositeAuthzHandler.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, dafei 李飞 (myaniu AT gmail DOT com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -15,10 +15,10 @@
  */
 package com.jfinalbbs.utils.ext.plugin.shiro;
 
-import java.util.List;
-
 import org.apache.shiro.authz.AuthorizationException;
 
+import java.util.List;
+
 /**
  * 组合模式访问控制处理器
  * @author dafei
@@ -26,15 +26,15 @@
  */
 class CompositeAuthzHandler implements AuthzHandler {
 
-	private final List<AuthzHandler> authzHandlers;
+    private final List<AuthzHandler> authzHandlers;
 
-	public CompositeAuthzHandler(List<AuthzHandler> authzHandlers){
-		this.authzHandlers = authzHandlers;
-	}
+    public CompositeAuthzHandler(List<AuthzHandler> authzHandlers) {
+        this.authzHandlers = authzHandlers;
+    }
 
-	public void assertAuthorized() throws AuthorizationException {
-		for(AuthzHandler authzHandler : authzHandlers){
-			authzHandler.assertAuthorized();
-		}
-	}
+    public void assertAuthorized() throws AuthorizationException {
+        for (AuthzHandler authzHandler : authzHandlers) {
+            authzHandler.assertAuthorized();
+        }
+    }
 }
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/GuestAuthzHandler.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/GuestAuthzHandler.java
index 0e01fefe8..a15e188a5 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/GuestAuthzHandler.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/GuestAuthzHandler.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, dafei 李飞 (myaniu AT gmail DOT com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -24,20 +24,21 @@
  *
  */
 class GuestAuthzHandler extends AbstractAuthzHandler {
-	private static GuestAuthzHandler gah = new GuestAuthzHandler();
+    private static GuestAuthzHandler gah = new GuestAuthzHandler();
 
-	private GuestAuthzHandler(){}
+    private GuestAuthzHandler() {
+    }
 
-	public static  GuestAuthzHandler me(){
-		return gah;
-	}
+    public static GuestAuthzHandler me() {
+        return gah;
+    }
 
-	public void assertAuthorized() throws AuthorizationException {
-		 if (getSubject().getPrincipal() != null) {
-	            throw new UnauthenticatedException("Attempting to perform a guest-only operation.  The current Subject is " +
-	                    "not a guest (they have been authenticated or remembered from a previous login).  Access " +
-	                    "denied.");
-	        }
-	}
+    public void assertAuthorized() throws AuthorizationException {
+        if (getSubject().getPrincipal() != null) {
+            throw new UnauthenticatedException("Attempting to perform a guest-only operation.  The current Subject is " +
+                    "not a guest (they have been authenticated or remembered from a previous login).  Access " +
+                    "denied.");
+        }
+    }
 
 }
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/PermissionAuthzHandler.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/PermissionAuthzHandler.java
index 512863e69..2a2c172d6 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/PermissionAuthzHandler.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/PermissionAuthzHandler.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, dafei 李飞 (myaniu AT gmail DOT com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -15,55 +15,55 @@
  */
 package com.jfinalbbs.utils.ext.plugin.shiro;
 
-import java.lang.annotation.Annotation;
-
 import org.apache.shiro.authz.AuthorizationException;
 import org.apache.shiro.authz.annotation.Logical;
 import org.apache.shiro.authz.annotation.RequiresPermissions;
 import org.apache.shiro.subject.Subject;
 
+import java.lang.annotation.Annotation;
+
 /**
  * 基于权限的访问控制处理器，非单例模式运行。
  * @author dafei
  *
  */
 class PermissionAuthzHandler extends AbstractAuthzHandler {
-	private final Annotation annotation;
+    private final Annotation annotation;
 
-	public PermissionAuthzHandler(Annotation annotation) {
-		this.annotation = annotation;
-	}
+    public PermissionAuthzHandler(Annotation annotation) {
+        this.annotation = annotation;
+    }
 
-	public void assertAuthorized() throws AuthorizationException {
-		if (!(annotation instanceof RequiresPermissions))
-			return;
+    public void assertAuthorized() throws AuthorizationException {
+        if (!(annotation instanceof RequiresPermissions))
+            return;
 
-		RequiresPermissions rpAnnotation = (RequiresPermissions) annotation;
-		String[] perms = rpAnnotation.value();
-		Subject subject = getSubject();
+        RequiresPermissions rpAnnotation = (RequiresPermissions) annotation;
+        String[] perms = rpAnnotation.value();
+        Subject subject = getSubject();
 
-		if (perms.length == 1) {
-			subject.checkPermission(perms[0]);
-			return;
-		}
-		if (Logical.AND.equals(rpAnnotation.logical())) {
-			getSubject().checkPermissions(perms);
-			return;
-		}
-		if (Logical.OR.equals(rpAnnotation.logical())) {
-			// Avoid processing exceptions unnecessarily - "delay" throwing the
-			// exception by calling hasRole first
-			boolean hasAtLeastOnePermission = false;
-			for (String permission : perms)
-				if (getSubject().isPermitted(permission))
-					hasAtLeastOnePermission = true;
-			// Cause the exception if none of the role match, note that the
-			// exception message will be a bit misleading
-			if (!hasAtLeastOnePermission)
-				getSubject().checkPermission(perms[0]);
+        if (perms.length == 1) {
+            subject.checkPermission(perms[0]);
+            return;
+        }
+        if (Logical.AND.equals(rpAnnotation.logical())) {
+            getSubject().checkPermissions(perms);
+            return;
+        }
+        if (Logical.OR.equals(rpAnnotation.logical())) {
+            // Avoid processing exceptions unnecessarily - "delay" throwing the
+            // exception by calling hasRole first
+            boolean hasAtLeastOnePermission = false;
+            for (String permission : perms)
+                if (getSubject().isPermitted(permission))
+                    hasAtLeastOnePermission = true;
+            // Cause the exception if none of the role match, note that the
+            // exception message will be a bit misleading
+            if (!hasAtLeastOnePermission)
+                getSubject().checkPermission(perms[0]);
 
-		}
+        }
 
-	}
+    }
 
 }
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/RoleAuthzHandler.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/RoleAuthzHandler.java
index af8845b0f..d8b6eadd9 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/RoleAuthzHandler.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/RoleAuthzHandler.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, dafei 李飞 (myaniu AT gmail DOT com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -15,27 +15,27 @@
  */
 package com.jfinalbbs.utils.ext.plugin.shiro;
 
-import java.lang.annotation.Annotation;
-import java.util.Arrays;
-
 import org.apache.shiro.authz.AuthorizationException;
 import org.apache.shiro.authz.annotation.Logical;
 import org.apache.shiro.authz.annotation.RequiresRoles;
 
+import java.lang.annotation.Annotation;
+import java.util.Arrays;
+
 /**
  * 基于角色的访问控制处理器，非单例模式运行。
  * @author dafei
  */
 class RoleAuthzHandler extends AbstractAuthzHandler {
 
-	private final Annotation annotation;
+    private final Annotation annotation;
 
-	public RoleAuthzHandler(Annotation annotation){
-		this.annotation = annotation;
-	}
+    public RoleAuthzHandler(Annotation annotation) {
+        this.annotation = annotation;
+    }
 
-	public void assertAuthorized() throws AuthorizationException {
-		//if (!(annotation instanceof RequiresRoles)) return;
+    public void assertAuthorized() throws AuthorizationException {
+        //if (!(annotation instanceof RequiresRoles)) return;
         RequiresRoles rrAnnotation = (RequiresRoles) annotation;
         String[] roles = rrAnnotation.value();
 
@@ -54,5 +54,5 @@ public void assertAuthorized() throws AuthorizationException {
             // Cause the exception if none of the role match, note that the exception message will be a bit misleading
             if (!hasAtLeastOneRole) getSubject().checkRole(roles[0]);
         }
-	}
+    }
 }
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroInterceptor.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroInterceptor.java
index 5a5b9f77c..3f99ee7ed 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroInterceptor.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroInterceptor.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, dafei 李飞 (myaniu AT gmail DOT com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -15,48 +15,47 @@
  */
 package com.jfinalbbs.utils.ext.plugin.shiro;
 
-import org.apache.shiro.authz.AuthorizationException;
-import org.apache.shiro.authz.UnauthenticatedException;
-
 import com.jfinal.aop.Interceptor;
 import com.jfinal.aop.Invocation;
 import com.jfinal.kit.StrKit;
+import org.apache.shiro.authz.AuthorizationException;
+import org.apache.shiro.authz.UnauthenticatedException;
 
 public class ShiroInterceptor implements Interceptor {
 
-	public void intercept(Invocation ai) {
-		AuthzHandler ah = ShiroKit.getAuthzHandler(ai.getActionKey());
-		// 存在访问控制处理器。
-		if (ah != null) {
-			try {
-				// 执行权限检查。
-				ah.assertAuthorized();
-			} catch (UnauthenticatedException lae) {
-				// RequiresGuest，RequiresAuthentication，RequiresUser，未满足时，抛出未经授权的异常。
-				// 如果没有进行身份验证，返回HTTP401状态码,或者跳转到默认登录页面
-				if(StrKit.notBlank(ShiroKit.getLoginUrl())){
-					//保存登录前的页面信息,只保存GET请求。其他请求不处理。
-					if(ai.getController().getRequest().getMethod().equalsIgnoreCase("GET")){
-						ai.getController().setSessionAttr(ShiroKit.getSavedRequestKey(), ai.getActionKey());
-					}
-					ai.getController().redirect(ShiroKit.getLoginUrl());
-				}else{
-					ai.getController().renderError(401);
-				}
-				return;
-			} catch (AuthorizationException ae) {
-				// RequiresRoles，RequiresPermissions授权异常
-				// 如果没有权限访问对应的资源，返回HTTP状态码403，或者调转到为授权页面
-				if(StrKit.notBlank(ShiroKit.getUnauthorizedUrl())){
+    public void intercept(Invocation ai) {
+        AuthzHandler ah = ShiroKit.getAuthzHandler(ai.getActionKey());
+        // 存在访问控制处理器。
+        if (ah != null) {
+            try {
+                // 执行权限检查。
+                ah.assertAuthorized();
+            } catch (UnauthenticatedException lae) {
+                // RequiresGuest，RequiresAuthentication，RequiresUser，未满足时，抛出未经授权的异常。
+                // 如果没有进行身份验证，返回HTTP401状态码,或者跳转到默认登录页面
+                if (StrKit.notBlank(ShiroKit.getLoginUrl())) {
+                    //保存登录前的页面信息,只保存GET请求。其他请求不处理。
+                    if (ai.getController().getRequest().getMethod().equalsIgnoreCase("GET")) {
+                        ai.getController().setSessionAttr(ShiroKit.getSavedRequestKey(), ai.getActionKey());
+                    }
+                    ai.getController().redirect(ShiroKit.getLoginUrl());
+                } else {
+                    ai.getController().renderError(401);
+                }
+                return;
+            } catch (AuthorizationException ae) {
+                // RequiresRoles，RequiresPermissions授权异常
+                // 如果没有权限访问对应的资源，返回HTTP状态码403，或者调转到为授权页面
+                if (StrKit.notBlank(ShiroKit.getUnauthorizedUrl())) {
 //					ai.getController().redirect(ShiroKit.getUnauthorizedUrl());
-					ai.getController().renderError(401);
-				}else{
-					ai.getController().renderError(403);
-				}
-				return;
-			}
-		}
-		// 执行正常逻辑
-		ai.invoke();
-	}
+                    ai.getController().renderError(401);
+                } else {
+                    ai.getController().renderError(403);
+                }
+                return;
+            }
+        }
+        // 执行正常逻辑
+        ai.invoke();
+    }
 }
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroKit.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroKit.java
index 2595c4e97..8241df023 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroKit.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroKit.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, dafei 李飞 (myaniu AT gmail DOT com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -25,79 +25,81 @@
  */
 public class ShiroKit {
 
-	/**
-	 * 登录成功时所用的页面。
-	 */
-	private static String successUrl = "/admin/index";
+    /**
+     * 登录成功时所用的页面。
+     */
+    private static String successUrl = "/admin/index";
 
-	/**
-	 * 登录时所用的页面。
-	 */
-	private static String loginUrl = "/adminlogin";
+    /**
+     * 登录时所用的页面。
+     */
+    private static String loginUrl = "/adminlogin";
 
 
-	/**
-	 * 认证未通过的页面。
-	 */
-	private static String unauthorizedUrl ="/401.html";
+    /**
+     * 认证未通过的页面。
+     */
+    private static String unauthorizedUrl = "/401.html";
 
 
-	/**
-	 * Session中保存的请求的Key值
-	 */
-	private static String SAVED_REQUEST_KEY = "jfinalShiroSavedRequest";
+    /**
+     * Session中保存的请求的Key值
+     */
+    private static String SAVED_REQUEST_KEY = "jfinalShiroSavedRequest";
 
 
-	/**
-	 * 用来记录那个action或者actionpath中是否有shiro认证注解。
-	 */
-	private static ConcurrentMap<String, AuthzHandler> authzMaps = null;
+    /**
+     * 用来记录那个action或者actionpath中是否有shiro认证注解。
+     */
+    private static ConcurrentMap<String, AuthzHandler> authzMaps = null;
 
-	/**
-	 * 禁止初始化
-	 */
-	private ShiroKit() {}
+    /**
+     * 禁止初始化
+     */
+    private ShiroKit() {
+    }
 
-	static void init(ConcurrentMap<String, AuthzHandler> maps) {
-		authzMaps = maps;
-	}
+    static void init(ConcurrentMap<String, AuthzHandler> maps) {
+        authzMaps = maps;
+    }
 
-	static AuthzHandler getAuthzHandler(String actionKey){
-		/*
+    static AuthzHandler getAuthzHandler(String actionKey) {
+        /*
 		if(authzMaps.containsKey(controllerClassName)){
 			return true;
 		}*/
-		return authzMaps.get(actionKey);
-	}
-
-	public static final String getSuccessUrl() {
-		return successUrl;
-	}
-
-	public static final void setSuccessUrl(String successUrl) {
-		ShiroKit.successUrl = successUrl;
-	}
-
-	public static final String getLoginUrl() {
-		return loginUrl;
-	}
-
-	public static final void setLoginUrl(String loginUrl) {
-		ShiroKit.loginUrl = loginUrl;
-	}
-
-	public static final String getUnauthorizedUrl() {
-		return unauthorizedUrl;
-	}
-
-	public static final void setUnauthorizedUrl(String unauthorizedUrl) {
-		ShiroKit.unauthorizedUrl = unauthorizedUrl;
-	}
-	/**
-	 * Session中保存的请求的Key值
-	 * @return
-	 */
-	public static final String getSavedRequestKey(){
-		return SAVED_REQUEST_KEY;
-	}
+        return authzMaps.get(actionKey);
+    }
+
+    public static final String getSuccessUrl() {
+        return successUrl;
+    }
+
+    public static final void setSuccessUrl(String successUrl) {
+        ShiroKit.successUrl = successUrl;
+    }
+
+    public static final String getLoginUrl() {
+        return loginUrl;
+    }
+
+    public static final void setLoginUrl(String loginUrl) {
+        ShiroKit.loginUrl = loginUrl;
+    }
+
+    public static final String getUnauthorizedUrl() {
+        return unauthorizedUrl;
+    }
+
+    public static final void setUnauthorizedUrl(String unauthorizedUrl) {
+        ShiroKit.unauthorizedUrl = unauthorizedUrl;
+    }
+
+    /**
+     * Session中保存的请求的Key值
+     * @return
+     */
+    public static final String getSavedRequestKey() {
+        return SAVED_REQUEST_KEY;
+    }
 }
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroMethod.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroMethod.java
index 38beb294c..be3bc1636 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroMethod.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroMethod.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, dafei 李飞 (myaniu AT gmail DOT com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -25,161 +25,162 @@
  */
 public class ShiroMethod {
 
-	private static final String NAMES_DELIMETER = ",";
-
-	/**
-	 * 禁止初始化
-	 */
-	private ShiroMethod() {}
-
-	/**
-	 * 获取 Subject
-	 *
-	 * @return Subject
-	 */
-	protected static Subject getSubject() {
-		return SecurityUtils.getSubject();
-	}
-
-	/**
-	 * 验证当前用户是否属于该角色？,使用时与lacksRole 搭配使用
-	 *
-	 * @param roleName
-	 *            角色名
-	 * @return 属于该角色：true，否则false
-	 */
-	public static boolean hasRole(String roleName) {
-		return getSubject() != null && roleName != null
-				&& roleName.length() > 0 && getSubject().hasRole(roleName);
-	}
-
-	/**
-	 * 与hasRole标签逻辑相反，当用户不属于该角色时验证通过。
-	 *
-	 * @param roleName
-	 *            角色名
-	 * @return 不属于该角色：true，否则false
-	 */
-	public static boolean lacksRole(String roleName) {
-		return !hasRole(roleName);
-	}
-
-	/**
-	 * 验证当前用户是否属于以下任意一个角色。
-	 *
-	 * @param roleNames
-	 *            角色列表
-	 * @return 属于:true,否则false
-	 */
-	public static boolean hasAnyRoles(String roleNames) {
-		boolean hasAnyRole = false;
-		Subject subject = getSubject();
-		if (subject != null && roleNames != null && roleNames.length() > 0) {
-			// Iterate through roles and check to see if the user has one of the
-			// roles
-			for (String role : roleNames.split(NAMES_DELIMETER)) {
-				if (subject.hasRole(role.trim())) {
-					hasAnyRole = true;
-					break;
-				}
-			}
-		}
-		return hasAnyRole;
-	}
-
-	/**
-	 * 验证当前用户是否属于以下所有角色。
-	 *
-	 * @param roleNames
-	 *            角色列表
-	 * @return 属于:true,否则false
-	 */
-	public static boolean hasAllRoles(String roleNames) {
-		boolean hasAllRole = true;
-		Subject subject = getSubject();
-		if (subject != null && roleNames != null && roleNames.length() > 0) {
-			// Iterate through roles and check to see if the user has one of the
-			// roles
-			for (String role : roleNames.split(NAMES_DELIMETER)) {
-				if (!subject.hasRole(role.trim())) {
-					hasAllRole = false;
-					break;
-				}
-			}
-		}
-		return hasAllRole;
-	}
-
-	/**
-	 * 验证当前用户是否拥有指定权限,使用时与lacksPermission 搭配使用
-	 *
-	 * @param permission
-	 *            权限名
-	 * @return 拥有权限：true，否则false
-	 */
-	public static boolean hasPermission(String permission) {
-		return getSubject() != null && permission != null
-				&& permission.length() > 0
-				&& getSubject().isPermitted(permission);
-	}
-
-	/**
-	 * 与hasPermission标签逻辑相反，当前用户没有制定权限时，验证通过。
-	 *
-	 * @param permission
-	 *            权限名
-	 * @return 拥有权限：true，否则false
-	 */
-	public static boolean lacksPermission(String permission) {
-		return !hasPermission(permission);
-	}
-
-	/**
-	 * 已认证通过的用户。不包含已记住的用户，这是与user标签的区别所在。与notAuthenticated搭配使用
-	 *
-	 * @return 通过身份验证：true，否则false
-	 */
-	public static boolean authenticated() {
-		return getSubject() != null && getSubject().isAuthenticated();
-	}
-
-	/**
-	 * 未认证通过用户，与authenticated标签相对应。与guest标签的区别是，该标签包含已记住用户。。
-	 *
-	 * @return 没有通过身份验证：true，否则false
-	 */
-	public static boolean notAuthenticated() {
-		return !authenticated();
-	}
-
-	/**
-	 * 认证通过或已记住的用户。与guset搭配使用。
-	 *
-	 * @return 用户：true，否则 false
-	 */
-	public static boolean user() {
-		return getSubject() != null && getSubject().getPrincipal() != null;
-	}
-
-	/**
-	 * 验证当前用户是否为“访客”，即未认证（包含未记住）的用户。用user搭配使用
-	 *
-	 * @return 访客：true，否则false
-	 */
-	public static boolean guest() {
-		return !user();
-	}
-
-	/**
-	 * 输出当前用户信息，通常为登录帐号信息。
-	 * @return 当前用户信息
-	 */
-	public String principal(){
-		if (getSubject() != null) {
+    private static final String NAMES_DELIMETER = ",";
+
+    /**
+     * 禁止初始化
+     */
+    private ShiroMethod() {
+    }
+
+    /**
+     * 获取 Subject
+     *
+     * @return Subject
+     */
+    protected static Subject getSubject() {
+        return SecurityUtils.getSubject();
+    }
+
+    /**
+     * 验证当前用户是否属于该角色？,使用时与lacksRole 搭配使用
+     *
+     * @param roleName
+     *            角色名
+     * @return 属于该角色：true，否则false
+     */
+    public static boolean hasRole(String roleName) {
+        return getSubject() != null && roleName != null
+                && roleName.length() > 0 && getSubject().hasRole(roleName);
+    }
+
+    /**
+     * 与hasRole标签逻辑相反，当用户不属于该角色时验证通过。
+     *
+     * @param roleName
+     *            角色名
+     * @return 不属于该角色：true，否则false
+     */
+    public static boolean lacksRole(String roleName) {
+        return !hasRole(roleName);
+    }
+
+    /**
+     * 验证当前用户是否属于以下任意一个角色。
+     *
+     * @param roleNames
+     *            角色列表
+     * @return 属于:true,否则false
+     */
+    public static boolean hasAnyRoles(String roleNames) {
+        boolean hasAnyRole = false;
+        Subject subject = getSubject();
+        if (subject != null && roleNames != null && roleNames.length() > 0) {
+            // Iterate through roles and check to see if the user has one of the
+            // roles
+            for (String role : roleNames.split(NAMES_DELIMETER)) {
+                if (subject.hasRole(role.trim())) {
+                    hasAnyRole = true;
+                    break;
+                }
+            }
+        }
+        return hasAnyRole;
+    }
+
+    /**
+     * 验证当前用户是否属于以下所有角色。
+     *
+     * @param roleNames
+     *            角色列表
+     * @return 属于:true,否则false
+     */
+    public static boolean hasAllRoles(String roleNames) {
+        boolean hasAllRole = true;
+        Subject subject = getSubject();
+        if (subject != null && roleNames != null && roleNames.length() > 0) {
+            // Iterate through roles and check to see if the user has one of the
+            // roles
+            for (String role : roleNames.split(NAMES_DELIMETER)) {
+                if (!subject.hasRole(role.trim())) {
+                    hasAllRole = false;
+                    break;
+                }
+            }
+        }
+        return hasAllRole;
+    }
+
+    /**
+     * 验证当前用户是否拥有指定权限,使用时与lacksPermission 搭配使用
+     *
+     * @param permission
+     *            权限名
+     * @return 拥有权限：true，否则false
+     */
+    public static boolean hasPermission(String permission) {
+        return getSubject() != null && permission != null
+                && permission.length() > 0
+                && getSubject().isPermitted(permission);
+    }
+
+    /**
+     * 与hasPermission标签逻辑相反，当前用户没有制定权限时，验证通过。
+     *
+     * @param permission
+     *            权限名
+     * @return 拥有权限：true，否则false
+     */
+    public static boolean lacksPermission(String permission) {
+        return !hasPermission(permission);
+    }
+
+    /**
+     * 已认证通过的用户。不包含已记住的用户，这是与user标签的区别所在。与notAuthenticated搭配使用
+     *
+     * @return 通过身份验证：true，否则false
+     */
+    public static boolean authenticated() {
+        return getSubject() != null && getSubject().isAuthenticated();
+    }
+
+    /**
+     * 未认证通过用户，与authenticated标签相对应。与guest标签的区别是，该标签包含已记住用户。。
+     *
+     * @return 没有通过身份验证：true，否则false
+     */
+    public static boolean notAuthenticated() {
+        return !authenticated();
+    }
+
+    /**
+     * 认证通过或已记住的用户。与guset搭配使用。
+     *
+     * @return 用户：true，否则 false
+     */
+    public static boolean user() {
+        return getSubject() != null && getSubject().getPrincipal() != null;
+    }
+
+    /**
+     * 验证当前用户是否为“访客”，即未认证（包含未记住）的用户。用user搭配使用
+     *
+     * @return 访客：true，否则false
+     */
+    public static boolean guest() {
+        return !user();
+    }
+
+    /**
+     * 输出当前用户信息，通常为登录帐号信息。
+     * @return 当前用户信息
+     */
+    public String principal() {
+        if (getSubject() != null) {
             // Get the principal to print out
             Object principal = getSubject().getPrincipal();
             return principal.toString();
         }
-		return "Guest";
-	}
+        return "Guest";
+    }
 }
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroPlugin.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroPlugin.java
index c7da13d6b..3d4dc862c 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroPlugin.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/ShiroPlugin.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, dafei 李飞 (myaniu AT gmail DOT com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -15,6 +15,12 @@
  */
 package com.jfinalbbs.utils.ext.plugin.shiro;
 
+import com.jfinal.config.Routes;
+import com.jfinal.core.ActionKey;
+import com.jfinal.core.Controller;
+import com.jfinal.plugin.IPlugin;
+import org.apache.shiro.authz.annotation.*;
+
 import java.lang.annotation.Annotation;
 import java.lang.reflect.Method;
 import java.util.ArrayList;
@@ -25,17 +31,6 @@
 import java.util.concurrent.ConcurrentHashMap;
 import java.util.concurrent.ConcurrentMap;
 
-import org.apache.shiro.authz.annotation.RequiresAuthentication;
-import org.apache.shiro.authz.annotation.RequiresGuest;
-import org.apache.shiro.authz.annotation.RequiresPermissions;
-import org.apache.shiro.authz.annotation.RequiresRoles;
-import org.apache.shiro.authz.annotation.RequiresUser;
-
-import com.jfinal.config.Routes;
-import com.jfinal.core.ActionKey;
-import com.jfinal.core.Controller;
-import com.jfinal.plugin.IPlugin;
-
 /**
  * Shiro插件，启动时加载所有Shiro访问控制注解。
  * @author dafei
@@ -44,285 +39,284 @@
 @SuppressWarnings("unchecked")
 public class ShiroPlugin implements IPlugin {
 
-	/**
-	 * 登录成功时所用的页面。
-	 */
-	private  String successUrl = "/admin/index";
+    /**
+     * 登录成功时所用的页面。
+     */
+    private String successUrl = "/admin/index";
+
+    /**
+     * 登录成功时所用的页面。
+     */
+    private String loginUrl = "/adminlogin";
 
-	/**
-	 * 登录成功时所用的页面。
-	 */
-	private  String loginUrl = "/adminlogin";
 
+    /**
+     * 登录成功时所用的页面。
+     */
+    private String unauthorizedUrl = "/401";
 
-	/**
-	 * 登录成功时所用的页面。
-	 */
-	private  String unauthorizedUrl ="/401";
 
+    private final String SLASH = "/";
 
-	private  final String SLASH = "/";
+    /**
+     * Shiro的几种访问控制注解
+     */
+    private static final Class<? extends Annotation>[] AUTHZ_ANNOTATION_CLASSES = new Class[]{
+            RequiresPermissions.class, RequiresRoles.class, RequiresUser.class,
+            RequiresGuest.class, RequiresAuthentication.class};
 
-	/**
-	 * Shiro的几种访问控制注解
-	 */
-	private static final Class<? extends Annotation>[] AUTHZ_ANNOTATION_CLASSES = new Class[] {
-			RequiresPermissions.class, RequiresRoles.class, RequiresUser.class,
-			RequiresGuest.class, RequiresAuthentication.class };
+    /**
+     * 路由设定
+     */
+    private final Routes routes;
 
-	/**
-	 * 路由设定
-	 */
-	private final Routes routes;
+    /**
+     * 构造函数
+     * @param routes 路由设定
+     */
+    public ShiroPlugin(Routes routes) {
+        this.routes = routes;
+    }
 
-	/**
-	 * 构造函数
-	 * @param routes 路由设定
-	 */
-	public ShiroPlugin(Routes routes){
-		this.routes = routes;
-	}
+    /**
+     * 停止插件
+     */
+    public boolean stop() {
+        return true;
+    }
 
-	/**
-	 * 停止插件
-	 */
-	public boolean stop() {
-		return true;
-	}
+    /**
+     * 启动插件
+     */
+    public boolean start() {
+        Set<String> excludedMethodName = buildExcludedMethodName();
+        ConcurrentMap<String, AuthzHandler> authzMaps = new ConcurrentHashMap<String, AuthzHandler>();
+        //逐个访问所有注册的Controller，解析Controller及action上的所有Shiro注解。
+        //并依据这些注解，actionKey提前构建好权限检查处理器。
+        for (Entry<String, Class<? extends Controller>> entry : routes
+                .getEntrySet()) {
+            Class<? extends Controller> controllerClass = entry.getValue();
 
-	/**
-	 * 启动插件
-	 */
-	public boolean start() {
-		Set<String> excludedMethodName = buildExcludedMethodName();
-		ConcurrentMap<String, AuthzHandler> authzMaps = new ConcurrentHashMap<String, AuthzHandler>();
-		//逐个访问所有注册的Controller，解析Controller及action上的所有Shiro注解。
-		//并依据这些注解，actionKey提前构建好权限检查处理器。
-		for (Entry<String, Class<? extends Controller>> entry : routes
-				.getEntrySet()) {
-			Class<? extends Controller> controllerClass = entry.getValue();
+            String controllerKey = entry.getKey();
 
-			String controllerKey = entry.getKey();
+            // 获取Controller的所有Shiro注解。
+            List<Annotation> controllerAnnotations = getAuthzAnnotations(controllerClass);
+            // 逐个遍历方法。
+            Method[] methods = controllerClass.getMethods();
+            for (Method method : methods) {
+                //排除掉Controller基类的所有方法，并且只关注没有参数的Action方法。
+                if (!excludedMethodName.contains(method.getName())
+                        && method.getParameterTypes().length == 0) {
+                    //若该方法上存在ClearShiro注解，则对该action不进行访问控制检查。
+                    if (isClearShiroAnnotationPresent(method)) {
+                        continue;
+                    }
+                    //获取方法的所有Shiro注解。
+                    List<Annotation> methodAnnotations = getAuthzAnnotations(method);
+                    //依据Controller的注解和方法的注解来生成访问控制处理器。
+                    AuthzHandler authzHandler = createAuthzHandler(
+                            controllerAnnotations, methodAnnotations);
+                    //生成访问控制处理器成功。
+                    if (authzHandler != null) {
+                        //构建ActionKey，参考ActionMapping中实现
+                        String actionKey = createActionKey(controllerClass, method, controllerKey);
+                        //添加映射
+                        authzMaps.put(actionKey, authzHandler);
+                    }
+                }
+            }
+        }
+        //注入到ShiroKit类中。ShiroKit类以单例模式运行。
+        ShiroKit.init(authzMaps);
+        /**
+         * 设定登录，登录成功，未授权等url地址
+         */
+        ShiroKit.setLoginUrl(loginUrl);
+        ShiroKit.setSuccessUrl(successUrl);
+        ShiroKit.setUnauthorizedUrl(unauthorizedUrl);
+        return true;
+    }
 
-			// 获取Controller的所有Shiro注解。
-			List<Annotation> controllerAnnotations = getAuthzAnnotations(controllerClass);
-			// 逐个遍历方法。
-			Method[] methods = controllerClass.getMethods();
-			for (Method method : methods) {
-				//排除掉Controller基类的所有方法，并且只关注没有参数的Action方法。
-				if (!excludedMethodName.contains(method.getName())
-						&& method.getParameterTypes().length == 0) {
-					//若该方法上存在ClearShiro注解，则对该action不进行访问控制检查。
-					if(isClearShiroAnnotationPresent(method)){
-						continue;
-					}
-					//获取方法的所有Shiro注解。
-					List<Annotation> methodAnnotations = getAuthzAnnotations(method);
-					//依据Controller的注解和方法的注解来生成访问控制处理器。
-					AuthzHandler authzHandler = createAuthzHandler(
-							controllerAnnotations, methodAnnotations);
-					//生成访问控制处理器成功。
-					if (authzHandler != null) {
-						//构建ActionKey，参考ActionMapping中实现
-						String actionKey = createActionKey(controllerClass, method, controllerKey);
-						//添加映射
-						authzMaps.put(actionKey, authzHandler);
-					}
-				}
-			}
-		}
-		//注入到ShiroKit类中。ShiroKit类以单例模式运行。
-		ShiroKit.init(authzMaps);
-		/**
-		 * 设定登录，登录成功，未授权等url地址
-		 */
-		ShiroKit.setLoginUrl(loginUrl);
-		ShiroKit.setSuccessUrl(successUrl);
-		ShiroKit.setUnauthorizedUrl(unauthorizedUrl);
-		return true;
-	}
+    /**
+     * 从Controller方法中构建出需要排除的方法列表
+     * @return
+     */
+    private Set<String> buildExcludedMethodName() {
+        Set<String> excludedMethodName = new HashSet<String>();
+        Method[] methods = Controller.class.getMethods();
+        for (Method m : methods) {
+            if (m.getParameterTypes().length == 0)
+                excludedMethodName.add(m.getName());
+        }
+        return excludedMethodName;
+    }
 
-	/**
-	 * 从Controller方法中构建出需要排除的方法列表
-	 * @return
-	 */
-	private Set<String> buildExcludedMethodName() {
-		Set<String> excludedMethodName = new HashSet<String>();
-		Method[] methods = Controller.class.getMethods();
-		for (Method m : methods) {
-			if (m.getParameterTypes().length == 0)
-				excludedMethodName.add(m.getName());
-		}
-		return excludedMethodName;
-	}
+    /**
+     * 依据Controller的注解和方法的注解来生成访问控制处理器。
+     * @param controllerAnnotations  Controller的注解
+     * @param methodAnnotations 方法的注解
+     * @return 访问控制处理器
+     */
+    private AuthzHandler createAuthzHandler(
+            List<Annotation> controllerAnnotations,
+            List<Annotation> methodAnnotations) {
 
-	/**
-	 * 依据Controller的注解和方法的注解来生成访问控制处理器。
-	 * @param controllerAnnotations  Controller的注解
-	 * @param methodAnnotations 方法的注解
-	 * @return 访问控制处理器
-	 */
-	private AuthzHandler createAuthzHandler(
-			List<Annotation> controllerAnnotations,
-			List<Annotation> methodAnnotations) {
+        //没有注解
+        if (controllerAnnotations.size() == 0 && methodAnnotations.size() == 0) {
+            return null;
+        }
+        //至少有一个注解
+        List<AuthzHandler> authzHandlers = new ArrayList<AuthzHandler>(5);
+        for (int index = 0; index < 5; index++) {
+            authzHandlers.add(null);
+        }
 
-		//没有注解
-		if (controllerAnnotations.size() == 0 && methodAnnotations.size() == 0) {
-			return null;
-		}
-		//至少有一个注解
-		List<AuthzHandler> authzHandlers = new ArrayList<AuthzHandler>(5);
-		for (int index = 0; index < 5; index++) {
-			authzHandlers.add(null);
-		}
+        // 逐个扫描注解，若是相应的注解则在相应的位置赋值。
+        scanAnnotation(authzHandlers, controllerAnnotations);
+        // 逐个扫描注解，若是相应的注解则在相应的位置赋值。函数的注解优先级高于Controller
+        scanAnnotation(authzHandlers, methodAnnotations);
 
-		// 逐个扫描注解，若是相应的注解则在相应的位置赋值。
-		scanAnnotation(authzHandlers, controllerAnnotations);
-		// 逐个扫描注解，若是相应的注解则在相应的位置赋值。函数的注解优先级高于Controller
-		scanAnnotation(authzHandlers, methodAnnotations);
+        // 去除空值
+        List<AuthzHandler> finalAuthzHandlers = new ArrayList<AuthzHandler>();
+        for (AuthzHandler a : authzHandlers) {
+            if (a != null) {
+                finalAuthzHandlers.add(a);
+            }
+        }
+        authzHandlers = null;
+        // 存在多个，则构建组合AuthzHandler
+        if (finalAuthzHandlers.size() > 1) {
+            return new CompositeAuthzHandler(finalAuthzHandlers);
+        }
+        // 一个的话直接返回
+        return finalAuthzHandlers.get(0);
+    }
 
-		// 去除空值
-		List<AuthzHandler> finalAuthzHandlers = new ArrayList<AuthzHandler>();
-		for (AuthzHandler a : authzHandlers) {
-			if (a != null) {
-				finalAuthzHandlers.add(a);
-			}
-		}
-		authzHandlers = null;
-		// 存在多个，则构建组合AuthzHandler
-		if (finalAuthzHandlers.size() > 1) {
-			return new CompositeAuthzHandler(finalAuthzHandlers);
-		}
-		// 一个的话直接返回
-		return finalAuthzHandlers.get(0);
-	}
+    /**
+     * 逐个扫描注解，若是相应的注解则在相应的位置赋值。
+     * 注解的处理是有顺序的，依次为RequiresRoles，RequiresPermissions，
+     * RequiresAuthentication，RequiresUser，RequiresGuest
+     *
+     * @param authzArray
+     * @param annotations
+     */
+    private void scanAnnotation(List<AuthzHandler> authzArray,
+                                List<Annotation> annotations) {
+        if (null == annotations || 0 == annotations.size()) {
+            return;
+        }
+        for (Annotation a : annotations) {
+            if (a instanceof RequiresRoles) {
+                authzArray.set(0, new RoleAuthzHandler(a));
+            } else if (a instanceof RequiresPermissions) {
+                authzArray.set(1, new PermissionAuthzHandler(a));
+            } else if (a instanceof RequiresAuthentication) {
+                authzArray.set(2, AuthenticatedAuthzHandler.me());
+            } else if (a instanceof RequiresUser) {
+                authzArray.set(3, UserAuthzHandler.me());
+            } else if (a instanceof RequiresGuest) {
+                authzArray.set(4, GuestAuthzHandler.me());
+            }
+        }
+    }
 
-	/**
-	 * 逐个扫描注解，若是相应的注解则在相应的位置赋值。
-	 * 注解的处理是有顺序的，依次为RequiresRoles，RequiresPermissions，
-	 * RequiresAuthentication，RequiresUser，RequiresGuest
-	 *
-	 * @param authzArray
-	 * @param annotations
-	 */
-	private void scanAnnotation(List<AuthzHandler> authzArray,
-			List<Annotation> annotations) {
-		if (null == annotations || 0 == annotations.size()) {
-			return;
-		}
-		for (Annotation a : annotations) {
-			if (a instanceof RequiresRoles) {
-				authzArray.set(0, new RoleAuthzHandler(a));
-			} else if (a instanceof RequiresPermissions) {
-				authzArray.set(1, new PermissionAuthzHandler(a));
-			} else if (a instanceof RequiresAuthentication) {
-				authzArray.set(2, AuthenticatedAuthzHandler.me());
-			} else if (a instanceof RequiresUser) {
-				authzArray.set(3, UserAuthzHandler.me());
-			} else if (a instanceof RequiresGuest) {
-				authzArray.set(4, GuestAuthzHandler.me());
-			}
-		}
-	}
+    /**
+     * 构建actionkey，参考ActionMapping中的实现。
+     *
+     * @param controllerClass
+     * @param method
+     * @param controllerKey
+     * @return
+     */
+    private String createActionKey(Class<? extends Controller> controllerClass,
+                                   Method method, String controllerKey) {
+        String methodName = method.getName();
+        String actionKey = "";
 
-	/**
-	 * 构建actionkey，参考ActionMapping中的实现。
-	 *
-	 * @param controllerClass
-	 * @param method
-	 * @param controllerKey
-	 * @return
-	 */
-	private String createActionKey(Class<? extends Controller> controllerClass,
-			Method method, String controllerKey) {
-		String methodName = method.getName();
-		String actionKey = "";
+        ActionKey ak = method.getAnnotation(ActionKey.class);
+        if (ak != null) {
+            actionKey = ak.value().trim();
+            if ("".equals(actionKey))
+                throw new IllegalArgumentException(controllerClass.getName() + "." + methodName + "(): The argument of ActionKey can not be blank.");
+            if (!actionKey.startsWith(SLASH))
+                actionKey = SLASH + actionKey;
+        } else if (methodName.equals("index")) {
+            actionKey = controllerKey;
+        } else {
+            actionKey = controllerKey.equals(SLASH) ? SLASH + methodName : controllerKey + SLASH + methodName;
+        }
+        return actionKey;
+    }
 
-		ActionKey ak = method.getAnnotation(ActionKey.class);
-		if (ak != null) {
-			actionKey = ak.value().trim();
-			if ("".equals(actionKey))
-				throw new IllegalArgumentException(controllerClass.getName() + "." + methodName + "(): The argument of ActionKey can not be blank.");
-			if (!actionKey.startsWith(SLASH))
-				actionKey = SLASH + actionKey;
-		}
-		else if (methodName.equals("index")) {
-			actionKey = controllerKey;
-		}
-		else {
-			actionKey = controllerKey.equals(SLASH) ? SLASH + methodName : controllerKey + SLASH + methodName;
-		}
-		return actionKey;
-	}
+    /**
+     * 返回该方法的所有访问控制注解
+     *
+     * @param method
+     * @return
+     */
+    private List<Annotation> getAuthzAnnotations(Method method) {
+        List<Annotation> annotations = new ArrayList<Annotation>();
+        for (Class<? extends Annotation> annClass : AUTHZ_ANNOTATION_CLASSES) {
+            Annotation a = method.getAnnotation(annClass);
+            if (a != null) {
+                annotations.add(a);
+            }
+        }
+        return annotations;
+    }
 
-	/**
-	 * 返回该方法的所有访问控制注解
-	 *
-	 * @param method
-	 * @return
-	 */
-	private List<Annotation> getAuthzAnnotations(Method method) {
-		List<Annotation> annotations = new ArrayList<Annotation>();
-		for (Class<? extends Annotation> annClass : AUTHZ_ANNOTATION_CLASSES) {
-			Annotation a = method.getAnnotation(annClass);
-			if (a != null) {
-				annotations.add(a);
-			}
-		}
-		return annotations;
-	}
+    /**
+     * 返回该Controller的所有访问控制注解
+     *
+     * @param targetClass
+     * @return
+     */
+    private List<Annotation> getAuthzAnnotations(
+            Class<? extends Controller> targetClass) {
+        List<Annotation> annotations = new ArrayList<Annotation>();
+        for (Class<? extends Annotation> annClass : AUTHZ_ANNOTATION_CLASSES) {
+            Annotation a = targetClass.getAnnotation(annClass);
+            if (a != null) {
+                annotations.add(a);
+            }
+        }
+        return annotations;
+    }
 
-	/**
-	 * 返回该Controller的所有访问控制注解
-	 *
-	 * @param targetClass
-	 * @return
-	 */
-	private List<Annotation> getAuthzAnnotations(
-			Class<? extends Controller> targetClass) {
-		List<Annotation> annotations = new ArrayList<Annotation>();
-		for (Class<? extends Annotation> annClass : AUTHZ_ANNOTATION_CLASSES) {
-			Annotation a = targetClass.getAnnotation(annClass);
-			if (a != null) {
-				annotations.add(a);
-			}
-		}
-		return annotations;
-	}
-	/**
-	 * 该方法上是否有ClearShiro注解
-	 * @param method
-	 * @return
-	 */
-	private boolean isClearShiroAnnotationPresent(Method method) {
-		Annotation a = method.getAnnotation(ClearShiro.class);
-		if (a != null) {
-			return true;
-		}
-		return false;
-	}
+    /**
+     * 该方法上是否有ClearShiro注解
+     * @param method
+     * @return
+     */
+    private boolean isClearShiroAnnotationPresent(Method method) {
+        Annotation a = method.getAnnotation(ClearShiro.class);
+        if (a != null) {
+            return true;
+        }
+        return false;
+    }
 
-	/**
-	 * 登录成功连接
-	 * @param successUrl
-	 */
-	public final void setSuccessUrl(String successUrl) {
-		this.successUrl = successUrl;
-	}
+    /**
+     * 登录成功连接
+     * @param successUrl
+     */
+    public final void setSuccessUrl(String successUrl) {
+        this.successUrl = successUrl;
+    }
 
-	/**
-	 * 登录连接
-	 * @param loginUrl
-	 */
-	public final void setLoginUrl(String loginUrl) {
-		this.loginUrl = loginUrl;
-	}
+    /**
+     * 登录连接
+     * @param loginUrl
+     */
+    public final void setLoginUrl(String loginUrl) {
+        this.loginUrl = loginUrl;
+    }
 
-	/**
-	 * 未授权连接
-	 * @param unauthorizedUrl
-	 */
-	public final void setUnauthorizedUrl(String unauthorizedUrl) {
-		this.unauthorizedUrl = unauthorizedUrl;
-	}
+    /**
+     * 未授权连接
+     * @param unauthorizedUrl
+     */
+    public final void setUnauthorizedUrl(String unauthorizedUrl) {
+        this.unauthorizedUrl = unauthorizedUrl;
+    }
 }
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/UserAuthzHandler.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/UserAuthzHandler.java
index e23b6d37c..2abaa1534 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/UserAuthzHandler.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/shiro/UserAuthzHandler.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, dafei 李飞 (myaniu AT gmail DOT com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -25,19 +25,20 @@
  *
  */
 class UserAuthzHandler extends AbstractAuthzHandler {
-	private static UserAuthzHandler uah = new UserAuthzHandler();
+    private static UserAuthzHandler uah = new UserAuthzHandler();
 
-	private UserAuthzHandler(){}
+    private UserAuthzHandler() {
+    }
 
-	public static  UserAuthzHandler me(){
-		return uah;
-	}
+    public static UserAuthzHandler me() {
+        return uah;
+    }
 
-	public void assertAuthorized() throws AuthorizationException {
-		if (getSubject().getPrincipal() == null) {
+    public void assertAuthorized() throws AuthorizationException {
+        if (getSubject().getPrincipal() == null) {
             throw new UnauthenticatedException("Attempting to perform a user-only operation.  The current Subject is " +
                     "not a user (they haven't been authenticated or remembered from a previous login).  " +
                     "Access denied.");
         }
-	}
+    }
 }
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/AutoTableBindPlugin.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/AutoTableBindPlugin.java
index 88e253bfa..f3f720346 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/AutoTableBindPlugin.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/AutoTableBindPlugin.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, kidzhou 周磊 (zhouleib1412@gmail.com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -17,14 +17,14 @@
 
 import com.google.common.collect.Lists;
 import com.jfinal.kit.LogKit;
-import com.jfinalbbs.utils.ext.kit.ClassSearcher;
-import com.jfinalbbs.utils.ext.kit.Reflect;
 import com.jfinal.kit.PathKit;
 import com.jfinal.kit.StrKit;
 import com.jfinal.plugin.activerecord.ActiveRecordPlugin;
 import com.jfinal.plugin.activerecord.DbKit;
 import com.jfinal.plugin.activerecord.IDataSourceProvider;
 import com.jfinal.plugin.activerecord.Model;
+import com.jfinalbbs.utils.ext.kit.ClassSearcher;
+import com.jfinalbbs.utils.ext.kit.Reflect;
 
 import javax.sql.DataSource;
 import java.io.File;
@@ -214,6 +214,7 @@ public AutoTableBindPlugin libDir(String libDir) {
         this.libDir = libDir;
         return this;
     }
+
     public AutoTableBindPlugin includeAllJarsInLib(boolean includeAllJarsInLib) {
         this.includeAllJarsInLib = includeAllJarsInLib;
         return this;
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/INameStyle.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/INameStyle.java
index 8f445b845..510be890b 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/INameStyle.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/INameStyle.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, kidzhou 周磊 (zhouleib1412@gmail.com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/ParamNameStyles.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/ParamNameStyles.java
index a2f885a6e..1c1dc78a8 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/ParamNameStyles.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/ParamNameStyles.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, kidzhou 周磊 (zhouleib1412@gmail.com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/SimpleNameStyles.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/SimpleNameStyles.java
index ab77e56ee..2a082d6eb 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/SimpleNameStyles.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/SimpleNameStyles.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, kidzhou 周磊 (zhouleib1412@gmail.com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
diff --git a/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/TableBind.java b/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/TableBind.java
index fd32c2b94..c38651a49 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/TableBind.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/plugin/tablebind/TableBind.java
@@ -1,12 +1,12 @@
 /**
  * Copyright (c) 2011-2013, kidzhou 周磊 (zhouleib1412@gmail.com)
- *
+ * <p>
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -15,15 +15,11 @@
  */
 package com.jfinalbbs.utils.ext.plugin.tablebind;
 
-import java.lang.annotation.ElementType;
-import java.lang.annotation.Inherited;
-import java.lang.annotation.Retention;
-import java.lang.annotation.RetentionPolicy;
-import java.lang.annotation.Target;
+import java.lang.annotation.*;
 
 @Inherited
 @Retention(RetentionPolicy.RUNTIME)
-@Target({ ElementType.TYPE })
+@Target({ElementType.TYPE})
 public @interface TableBind {
     String tableName();
 
diff --git a/src/main/java/com/jfinalbbs/utils/ext/route/AutoBindRoutes.java b/src/main/java/com/jfinalbbs/utils/ext/route/AutoBindRoutes.java
index 4f9746cb0..ed328fc39 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/route/AutoBindRoutes.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/route/AutoBindRoutes.java
@@ -1,7 +1,5 @@
 package com.jfinalbbs.utils.ext.route;
 
-import java.util.List;
-
 import com.google.common.base.Preconditions;
 import com.google.common.collect.Lists;
 import com.jfinal.config.Routes;
@@ -10,6 +8,8 @@
 import com.jfinal.kit.StrKit;
 import com.jfinalbbs.utils.ext.kit.ClassSearcher;
 
+import java.util.List;
+
 public class AutoBindRoutes extends Routes {
 
     private boolean autoScan = true;
@@ -51,7 +51,7 @@ public AutoBindRoutes addJars(String... jars) {
     }
 
     @Override
-    @SuppressWarnings({ "rawtypes", "unchecked" })
+    @SuppressWarnings({"rawtypes", "unchecked"})
     public void config() {
         List<Class<? extends Controller>> controllerClasses = ClassSearcher.of(Controller.class)
                 .includeAllJarsInLib(includeAllJarsInLib).injars(includeJars).search();
@@ -80,7 +80,7 @@ public void config() {
 
     private String controllerKey(Class<Controller> clazz) {
         Preconditions.checkArgument(clazz.getSimpleName().endsWith(suffix),
-                clazz.getName()+" is not annotated with @ControllerBind and not end with " + suffix);
+                clazz.getName() + " is not annotated with @ControllerBind and not end with " + suffix);
         String controllerKey = "/" + StrKit.firstCharToLowerCase(clazz.getSimpleName());
         controllerKey = controllerKey.substring(0, controllerKey.indexOf(suffix));
         return controllerKey;
diff --git a/src/main/java/com/jfinalbbs/utils/ext/route/ControllerBind.java b/src/main/java/com/jfinalbbs/utils/ext/route/ControllerBind.java
index 226d4aaea..20ee6a42a 100644
--- a/src/main/java/com/jfinalbbs/utils/ext/route/ControllerBind.java
+++ b/src/main/java/com/jfinalbbs/utils/ext/route/ControllerBind.java
@@ -1,14 +1,10 @@
 package com.jfinalbbs.utils.ext.route;
 
-import java.lang.annotation.ElementType;
-import java.lang.annotation.Inherited;
-import java.lang.annotation.Retention;
-import java.lang.annotation.RetentionPolicy;
-import java.lang.annotation.Target;
+import java.lang.annotation.*;
 
 @Inherited
 @Retention(RetentionPolicy.RUNTIME)
-@Target({ ElementType.TYPE })
+@Target({ElementType.TYPE})
 public @interface ControllerBind {
     String controllerKey();
 
diff --git a/src/main/webapp/page/front/user/index.ftl b/src/main/webapp/page/front/user/index.ftl
index 2fae183fa..ef2e234e2 100644
--- a/src/main/webapp/page/front/user/index.ftl
+++ b/src/main/webapp/page/front/user/index.ftl
@@ -34,7 +34,7 @@
                 </p>
             </div>
             <div class="media-right">
-                <#if current_user.id != session.user.id>
+                <#if session.user?? && current_user.id != session.user.id>
                     <a href="javascript:void(0);" data-toggle="modal" data-target="#newMessageModal" class="btn btn-raised btn-sm btn-default">私信</a>
                 </#if>
             </div>