Fixed user controller and added local auth