initial AuthController with login/logout functionality