HF auth filter before success