refactoring: added controller; auth before other endpoint handlers
Merge pull request #20 from racker/dev/songgao

refactoring: added controller; auth before other endpoint handlers