AuthenticationFilter does nothing when it's a partial request