auth controller added