auth + minor controllers and views changes