Differentiate browsers from REST clients

And use this information to determine the response to access without a
login.
Merge djmitche/build-relengapi:redir-browsers-only (PR #87)