file controller now authenticated