diff --git a/WorkFlow.API/Controllers/AuthController.cs b/WorkFlow.API/Controllers/AuthController.cs
deleted file mode 100644
index f30bd2f..0000000
--- a/WorkFlow.API/Controllers/AuthController.cs
+++ /dev/null
@@ -1,154 +0,0 @@
-using Microsoft.AspNetCore.Authentication.Cookies;
-using Microsoft.AspNetCore.Authentication;
-using System.Security.Claims;
-using Microsoft.AspNetCore.Mvc;
-using DigitalData.UserManager.Application.Contracts;
-using DigitalData.UserManager.Application.DTOs.User;
-using Microsoft.AspNetCore.Authorization;
-using DigitalData.UserManager.Application;
-using DigitalData.Core.Abstractions.Application;
-using Microsoft.Extensions.Localization;
-using DigitalData.Core.DTO;
-using WorkFlow.API.Models;
-using WorkFlow.API.Attributes;
-
-namespace WorkFlow.API.Controllers
-{
-    //TODO: implement up-to-date AuthController in UserManager
-    [APIKeyAuth]
-    [Route("api/[controller]")]
-    [ApiController]
-    public class AuthController(IUserService userService, IDirectorySearchService dirSearchService, IStringLocalizer<Resource> localizer, ILogger<AuthController> logger) : ControllerBase
-    {
-        [AllowAnonymous]
-        [HttpGet("check")]
-        public IActionResult CheckAuthentication()
-        {
-            try
-            {
-                return Ok(User.Identity?.IsAuthenticated ?? false);
-            }
-            catch(Exception ex)
-            {
-                logger.LogError(ex, "{Message}", ex.Message);
-                return StatusCode(StatusCodes.Status500InternalServerError);
-            }
-        }
-
-        [NonAction]
-        public async Task<IActionResult> Login(UserReadDto user)
-        {
-            // Create claimsIdentity
-            var claimsIdentity = new ClaimsIdentity(user.ToClaimList(), CookieAuthenticationDefaults.AuthenticationScheme);
-
-            // Create authProperties
-            var authProperties = new AuthenticationProperties
-            {
-                IsPersistent = true,
-                AllowRefresh = true,
-                ExpiresUtc = DateTime.UtcNow.AddMinutes(60)
-            };
-
-            // Sign in
-            await HttpContext.SignInAsync(
-                CookieAuthenticationDefaults.AuthenticationScheme,
-                new ClaimsPrincipal(claimsIdentity),
-                authProperties);
-
-            return Ok();
-        }
-
-        [AllowAnonymous]
-        [HttpPost("login")]
-        public async Task<IActionResult> Login([FromBody] Login login)
-        {
-            try
-            {
-                return dirSearchService.ValidateCredentials(login.Username, login.Password)
-                    ? await userService.ReadByUsernameAsync(login.Username).ThenAsync(
-                        SuccessAsync: Login,
-                        Fail: IActionResult (msg, ntc) =>
-                        {
-                            logger.LogNotice(ntc);
-                            logger.LogError("User could not be found, although verified by directory-search-service. It needs to be imported by UserManager. User name is {username}.", login.Username);
-                            return StatusCode(StatusCodes.Status500InternalServerError);
-                        })
-                    : Unauthorized(localizer[WFKey.UserNotFoundOrWrongPassword].Value);
-            }
-            catch(Exception ex)
-            {
-                logger.LogError(ex, "{Message}", ex.Message);
-                return StatusCode(StatusCodes.Status500InternalServerError);
-            }
-        }
-
-        [AllowAnonymous]
-        [HttpPost("login/{id}")]
-        public async Task<IActionResult> LoginById([FromRoute] int id, [FromQuery] string password)
-        {
-            try
-            {
-                return await userService.ReadByIdAsync(id).ThenAsync(
-                    SuccessAsync: async user
-                        => dirSearchService.ValidateCredentials(user.Username, password)
-                            ? await Login(user)
-                            : Unauthorized(localizer[WFKey.WrongPassword].Value),
-                    Fail: (msg, ntc) =>
-                    {
-                        if (ntc.HasFlag(Flag.NotFound))
-                            return Unauthorized(Key.UserNotFound);
-
-                        logger.LogNotice(ntc);
-                        return StatusCode(StatusCodes.Status500InternalServerError);
-                    });               
-            }
-            catch (Exception ex)
-            {
-                logger.LogError(ex, "{Message}", ex.Message);
-                return StatusCode(StatusCodes.Status500InternalServerError);
-            }
-        }
-
-        [Authorize]
-        [HttpGet("user")]
-        public async Task<IActionResult> GetUserWithClaims()
-        {
-            try
-            {
-                // Extract the username from the Name claim.
-                string? username = User.Claims.FirstOrDefault(c => c.Type == ClaimTypes.Name)?.Value;
-
-                if (string.IsNullOrEmpty(username))
-                    return Unauthorized();
-
-                return await userService.ReadByUsernameAsync(username)
-                    .ThenAsync(Ok, IActionResult (m, n) =>
-                    {
-                        logger.LogNotice(n);
-                        return NotFound(Result.Fail().Message(localizer[Key.UserNotFound].Value));
-                    });
-            }
-            catch (Exception ex)
-            {
-                logger.LogError(ex, "{Message}", ex.Message);
-                return StatusCode(StatusCodes.Status500InternalServerError);
-            }
-        }
-
-        [Authorize]
-        [HttpPost("logout")]
-        public async Task<IActionResult> Logout()
-        {
-            try
-            {
-                await HttpContext.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
-                return Ok();
-            }
-            catch(Exception ex)
-            {
-                logger.LogError(ex, "{Message}", ex.Message);
-                return StatusCode(StatusCodes.Status500InternalServerError);
-            }
-        }
-    }
-}
\ No newline at end of file
diff --git a/WorkFlow.API/Controllers/PlaceHolderAuthController.cs b/WorkFlow.API/Controllers/PlaceHolderAuthController.cs
new file mode 100644
index 0000000..b920198
--- /dev/null
+++ b/WorkFlow.API/Controllers/PlaceHolderAuthController.cs
@@ -0,0 +1,44 @@
+using Microsoft.AspNetCore.Authentication.Cookies;
+using Microsoft.AspNetCore.Authentication;
+using System.Security.Claims;
+using Microsoft.AspNetCore.Mvc;
+using DigitalData.UserManager.Application.Contracts;
+using DigitalData.UserManager.Application.DTOs.User;
+using Microsoft.AspNetCore.Authorization;
+using DigitalData.UserManager.Application;
+using DigitalData.Core.Abstractions.Application;
+using WorkFlow.API.Models;
+using WorkFlow.API.Attributes;
+
+namespace WorkFlow.API.Controllers
+{
+    //TODO: implement up-to-date AuthController in UserManager
+    [APIKeyAuth]
+    [Route("Auth")]
+    [ApiController]
+    public class PlaceholderAuthController : ControllerBase
+    {
+        [HttpPost("login")]
+        [AllowAnonymous]
+        public IActionResult Login([FromForm] Login login)
+        {
+            throw new NotImplementedException();
+        }
+
+        [HttpPost("logout")]
+        public IActionResult Logout()
+        {
+            throw new NotImplementedException();
+        }
+
+        [HttpPost]
+        public IActionResult CreateTokenViaBody([FromBody] Login login, [FromQuery] bool cookie = false)
+        {
+            throw new NotImplementedException();
+        }
+
+        [HttpGet("check")]
+        [Authorize]
+        public IActionResult Check() => Ok();
+    }
+}
\ No newline at end of file
diff --git a/WorkFlow.API/Models/Login.cs b/WorkFlow.API/Models/Login.cs
index 4959890..9c111c9 100644
--- a/WorkFlow.API/Models/Login.cs
+++ b/WorkFlow.API/Models/Login.cs
@@ -1,4 +1,4 @@
 namespace WorkFlow.API.Models
 {
-    public record Login(string Username, string Password);
+    public record Login(int? UserId, string? Username, string Password);
 }
\ No newline at end of file
diff --git a/WorkFlow.API/Properties/launchSettings.json b/WorkFlow.API/Properties/launchSettings.json
index 4eaadf5..b954cd2 100644
--- a/WorkFlow.API/Properties/launchSettings.json
+++ b/WorkFlow.API/Properties/launchSettings.json
@@ -12,7 +12,7 @@
     "http": {
       "commandName": "Project",
       "dotnetRunMessages": true,
-      "launchBrowser": true,
+      "launchBrowser": false,
       "launchUrl": "swagger",
       "applicationUrl": "http://localhost:5130",
       "environmentVariables": {
@@ -22,7 +22,7 @@
     "https": {
       "commandName": "Project",
       "dotnetRunMessages": true,
-      "launchBrowser": true,
+      "launchBrowser": false,
       "launchUrl": "swagger",
       "applicationUrl": "https://localhost:7120;http://localhost:5130",
       "environmentVariables": {
@@ -31,7 +31,7 @@
     },
     "IIS Express": {
       "commandName": "IISExpress",
-      "launchBrowser": true,
+      "launchBrowser": false,
       "launchUrl": "swagger",
       "environmentVariables": {
         "ASPNETCORE_ENVIRONMENT": "Development"