add authorization filter with dynamic feature and unit tests