refactoring auth filter