Changing the order of authenticate and decrypt filters