added the controllers auth access