Add controllers and tests to support auth