GUAC-442: Use filter to authenticate and restrict access.
GUAC-442: Restrict access to WebSocket tunnel using filter (rather than RestrictedHttpServlet like the rest of guac).
GUAC-442: Only update authentication in specific requests.