JAX-RS Security Filter using cookies for Auth