inject AuthService to Controller + creation controller test