fix auth controller