added authentication to the new controllers