Auth Filter

the following happens when a brand new non-cookie request hits / of the sample gwt project shown below.

the image shown above illustrates how the gwt "App" under /app is refered to /auth when there is no valid session cookie found.

this uses a webserver filter built as shown at https://gist.github.com/jnorthrup/84c5e03c8f6dfb1258c3

first /[index.html] has a meta tag referer to /app. this is incidental.

then, when the filtering webserver gets a request prefixed with /app it checks for a valid session or sends a hard 303 response to /auth