modify auth controller