auth controller start