OAuth working with annotation based securiry