Authorize with filter instead of middleware.