Fix for #1650 - Make Authorization Filters run first

This change moves authorization filters to be the first filter stage
(before exception filters).
These two methods are cut-pasted verbatim from the below - I wanted the order in the file to reflect the execution order.