updated auth-ctrl