added 'asset' class for filtering, and isolated handler implementations for auth/asset/other