authentication controller bug fixes