add authenticate_user filtering.