moved auth controller view calls to a _render() function to allow users to more easily drop into existing template