cleaned up UserAuthenticationFilter a bit