indent auth controller

was kind of difficult to keep track of things