update controllers, add views, fix authentication