default extension in annotation, case sensitive controller name check, auth update