finished auth
logout and change password controllers added