Display 'Review' link when the user is logged in with groups that have viewAdmin permission somewhere in the repository, as determined by a solr querying filter.  Catch 404 exception when a request is made to a non-existent file via scontent path, so it doesn't log a trace.
Using session tracking mode of COOKIES for ROOT to prevent jsessionid from breaking about page links for users without cookies set, and so they won't show up in search engines.