added JSSerializer annotation
added authentication for api