The map backing SimpleMapBackedSecurityRealm should be an identity map not a password map.

This realm is useful in cases where we need an identity to exist where the mechanism has performed validation without requiring access to credentials.