Make sure ap_hook_post_read_request always runs first

This solves an issue we've had with mod_security where Apache hadn't changed to the right user when mod_security ran. This resulted in some unwanted behaviour where it partially ran as www-data and partially as the user set up in mod_ruid2.