added auth controller and model