test fix (have to run authenticateTokenFilter.init(); as @PostConstruct containing set of public urls not called during testing