title: How CQ authenticate each request?
body: <p>I'm aware of how AEM creates cookie called "login-token" after successful authentication .</p>
  
  <p>My question is how AEM validates this cookie in each request? Is there any filter available to intercept the request and then validate cookie? if not then how AEM invokes sling authentication handler again? </p>
  
  <p>I could not find here <a href="http://host:port/system/console/status-slingfilter" rel="noreferrer">http://host:port/system/console/status-slingfilter</a></p>
  
  <p>Please help me to clarify this </p>