clientless-mode, session-cookie and policy re-evaluation

Hi,

when ACCESS_POLICY_COMPLETED is raised, you cannot reevaluate the policy.

if you want to execute a irule in the policy evaluation, you can raise ACCESS_POLICY_AGENT_EVENT event:

when ACCESS_POLICY_AGENT_EVENT {
 if {[ACCESS::policy agent_id] == "otp"} {
 ACCESS::respond 200 OTP [ACCESS::session data get "session.otp.assigned.val"] SID [ACCESS::session data get "session.user.sessionid"] Connection Close } 
}

In ACCESS_POLICY_COMPLETED event, filter answer with Access policy result:

when ACCESS_POLICY_COMPLETED {
     Authentication request for non bowser user-agent session denied
    if { ([ACCESS::policy result] equals "deny") } {
        ...
    }
}