correct some security issues and set isAuthorized to the final variables
remiving them from the annotation constructors