updating authentication filter to allow non-repose requests