add authentication to weeks controller