Simple java security library

I have a project to do, which is a system to support submitting purchase requestes on my uni. I'm looking for a solid and as far as possible simple security library for java web app. I've been searching the Internet and Apache Shiro seems to be the only interesting choice. I couldn't find much except for this one in fact. I'll be grateful for every advice.