add auth controller
add crud and finish auth