auth controller update