added password auth, controller routing and directory cleanup