authentication filter added to application controller