changed application controller to reflect auth model.