added auth to sites controller