add auth annotations, return and error codes
code cleanup
refactor
error codes for filtering params