Fix filtering on authentication values and add a spec.