Create authorize filter based on user role