Need filter that allows members of specific group to authenticate, not sure how to build it