implemented server side authorization (SecurityFilter)