authenticate base controller