When an authorized request comes through for the hosted page resources,
eg images, css files, the valve chain is not called. Check if the user
is authorized, and if yes, then call the next valve. (Not applicable to
request holding saml requests and responses)