authentication is now done in applicaition controller

since one needs to be authenticated to use any part of the application
it makes no sense to ask to authenticate in every controller seperately
add base of authentication tokens
generation of authentication tokens complete