Add stubs and before state filter to enforce authentication