filters for login and private urls