authProvider and controller