the start of an auth controller