Ensure the login._check_session_cookie is always the first @before_request
    
    This in order to be sure that flask.g.fas_user is set to something when
    it should and thus that the order @before_request functions can rely on
    it.