auth controller coverage