small updates to auth controller