Review this Java filter that authorizes admin-only routes by normalizing the role claim before comparing.