Claims Authorisation filter works fine