added login controller
fixed auth with no browser geek