changed login to auth controller