fixed some authentication for controllers