SignedInCallerResolver
Requires a signed-in caller: decorated's caller without a subject, the anonymous one, is no caller, so the edge answers the request 401 on every route, as CoSec's resolver has it answered. For a service whose every route needs a user, in development too, where the host's callers (DevelopmentCallerResolver) serve a request without Wow-User as the anonymous caller.