Fix authorization for index (/annotations)