Fix authenticate_by_token before filter inclusion.