remove authenticate user from controllers