add auth
add user controller