add authenticate filter