adds controller authentication via access token