The authentication filter is now correctly applied. Tests passing