added controllers
authorization and session management <3