Added: use OAuthFilter middleware