add authentication filter for /suggestions