add filters for auth