added user_controller and skip authentication for it