Authentication using a ServletFilter.

I implemented the `FlickrAuthFilter` now in order to keep the "business logic"
(PhotosServlet) free from authentication logic. Now everything is nicely
separated. The filter inserts the `FlickrAccount` as principal into the servlet
request.