Add auth filter
Add HMAC-based token auth filter