fix auth before filter