authtoken filter moved to keystoneclient