fixed auth bug in usercontroller