fixed auth_required annotation