added auth controller