adding auth to reports controller