authentication filter, schema update