doc for auth controller