introduced authService, controllers simplified