add authentication filter