Put authen part in a role to make API part easier
Skeleton API controllers