Search for all the filters in the query and add the authorisation filter to the must clause. Clean up. Proxy always returns json response.