added logback and updated the auth filter to take the new token route into account