authorize controller authtoken send