auth controller updated