added a filter method to not return phone number nor the pin number to the client unless authenticated