Change auth logic
Add user controller