add and test authentication filtering