change root path and now user controller require authentification