Filter api requests based on the value of the 'department' cookie

This filter isn't applied to deeply nested API calls (anything beyond /patient/<nhi>/) while it probably should be. Also not 100% tested