adding user credentialing and remodeling controllers