add authentication for all controllers