authentication controller updated