Auth route filters and new permissions [OTF255]