updated auth controller