added auth.js controller