fix auth filter routing