updated
fixed controller declaration, changed auth to user service