added authentication filters and login/logout