authenticate all controllers