moved AuthController and CronController to core module