auth controller fix, user panel