initial oauth authentication and rest layer filter