authentication verification moved to cloudcast controller