added user authentication filter logic