put in ugly auth filter in the meantime