auth annotations