authentication moved to application controller
Users added