Embedded CDX: don't catch exception on AccessCheckFilter
Add perf stats to timemap handler
add user authority filter