Add user controller and auth