added authentication check to controllers

added password confirmation to supervisor creation