Fix for #1652 - Make Authorization Filters run first

This change moves authorization filters to be the first filter stage
(before exception filters).
Hmmm :) I was expecting that test to break after this change (Since it is List "all" filters). But realized Exception filters were not a part of it. So was wondering if there was a way to incorporate it there without short-circuiting further flow.