Implemented authorisation checks in some HTTP handlers.  #44  Dropped special handling of cached HTTP responses.