switch to new try/catch in api auth controller