Automation authentication via header fixes #254

- Authentication via headers was only allowed if _isRest() returned true
- this only happened for pages returning JSON or XML content

- a new check, _isAutomation() was added that allows authentication via headers for certain methods used by the automation system
Merge branch 'hotfix-2.2.22'