AuthenticationTokenValidator filter. next, fill the logic in