null checks and @RequestBody in AuthController