adding documention and an auth api for boards_controller