added AuthenticatioController, improved REST routes