updated auth filter, user details route