check auth by filter