authenthication on controller level

authenthication on controller level