Add @Auth annotation and Role enum for proper authentication