question controller auth detection