add auth controller