add auth controller and user model