Add annotation-based authentication