changes to auth controller