Auth Filter

the following happens when a brand new non-cookie request hits / of the sample project shown below.

this uses a webserver filter built as shown at https://gist.github.com/jnorthrup/84c5e03c8f6dfb1258c3

first, anything ending in / is returned from index.html under /

/index.html is a meta referer to /app in this example.

/app is requested without a valid session cookie. so a 303 result is returned pointing to /auth, with yet another html meta-tag referer to /auth/auth.html

finally, we see once /auth/auth.html is loaded that the gwt and cachable features of RelaxFactory are in play.