done endpoint for auth
new models and controllers