add require_auth filter