Require auth token before filter 3