-Using a Spring interceptor now vs. a filter for auth.