"If the client request is for a web page, file or other content, then the server system handles security for the response just before the content is returned to the client." . . . . .