removed authenticate user from all controllers