Request listener should filter certain requests

[typerandom]

To cut down on processing time, the request listener should immediately filter requests that are very unlikely to contain JWT headers. Such as requests to images and documents (e.g. PDF).

[robertjd]

FYI @typerandom we're pulling this into open as a priority.