fixed authentication filter