-AuthenticationFilter is properly intercepting requests, grabs the
Authorization header value, but doesn't do much else yet.