authenication in splash_controller (incorrect)