User controller, authentication, and login/register