add login controller
do not force login in user list