first draft of controllers for authentication