need to use active auth controller