added data notations on controlers for authentication