fix .htaccess file and added private controller
added a private page and authentication serivce