same constants are use in both AuthFilter and here. Please define them in single place.