(bug)  controll authentication in app.js