add authorize annotation