add controller test to authentication