Updated Auth controller to set user to null after logging out, instead of clearing user properties, so the controller doesn't need to know about all of its properties