use Auth annotation in BaseResource