move auth function to filter tree, login module sends key val instead of type