added: Jok Authentication
refactoring
added authentication check on controller