basic and cookie auth filters