added controller tests for authentication