added authentication before filter