Added auth to controllers.js