add auth_user! to exercise contorller