modified controllers to use new auth framework