Require auth token before filter