auth controller changes