moved views to front and back end and added auth controller