add auth filter implementation