filter all documents by auth on collection queries