add user authenticate to controller