add auth controller for authentication