added security, providing users for login, moved controllers to it's own folder