fixed auth controller