Update controllers.md

Updated the examples of adding filters within a controller to include an 'except' function for the 'auth' filter. This seems like a good display that you can tell the system to not run the filter for certain methods.