add RequireAuthenticate annotation