Add Auth Filter

We would like to use authentication project wide in certain projects without being explicit on each endpoint that it needs auth (via an `Action`) or being able to add auth on top of something that doesn't have it through an `Action`.

This adds `AuthFilterWithExemptions` and allows you to pick the `login` exemption explicitly and also any other exemptions that you mean need such as assets.