removed authentication from controllers so that we can test parts of the api without registering