minor (@Authorize annotation moved to class)