authenticate users on hours entries controller