updates
fix authentication in controllers
relocate nls