add keystone auth to control server