added authentication for these controllers