Created a new Authz filter for requests from widgets to APIs, for example for handling preferences and metadata. This is so we can migrate these facilities from relying on DWR.

git-svn-id: https://svn.apache.org/repos/asf/wookie/trunk@1572752 13f79535-47bb-0310-9956-ffa450edef68