added underscor, new Auth controller (w/o real contents)