adds controllers, removes app.rb, adds authentication framework