create auth controller