add authenticate to controllers