No longer forcing async on auth filter, not needed.