Move servlet code to separate class and mix in controllers via traits
Use SubCut for dependency injection
Make the auth strategy injectable