added http authentication to controller