split user authentification into separate controller to be reused with settings;