make authentication filter configurable