change auth-annotation handling