add auth to all new hire controllers