authentication on rec types controller