new auth controller added; code refactored