SECOAUTH-388: apply ClientCredentialsTokenEndpointFilter only if not already authenticated