Filter auth for the user controller