stubed out auth controller