http Interceptor for authentication