refine AuthFilter