Moved auth check to filter and route