fixed request type for auth controller