Add auth filter to routes.