Don't initialize more than once
Use separate filter for authenticate and normal requests