Authorization filter now also reads credentials stored in cookie, in order to allow for image links etc. to pass through.