Handle edge cases in filtering

**Feature request**
It would be great to have filtering for auth.

**Use case**
Many users need this functionality for production deployments.

**Implementation idea**
Add a new config option `enable_filtering` with default `false`.

No files, tests, or entry points are identified. Start by locating the authentication configuration and filtering path, then determine where a new enable_filtering option belongs. Done means authentication filtering is available for production deployments while the option defaults to false.

Written by the indexing model from the issue text.