Fix: auth filter logic;