fix auth-annotations