first pass of authentication workflow
second pass of authentication
add search controller