add AuthenticationFilter for REST access

I guess we could improve this part a little bit by using higher level methods like:
```
saveOriginalUrl(request);
redirectToIdentityProvider(context);
```