manually creating OAuth filters to insert them only once into security filter chain