For now, allow all requests to go through the BroadleafRequestFilter