updated user controller authentication