password filter to fix authentication after stateless revamp