auth filter added , #3