added filters for authentication and role checking