add authentication filter.