Removed faulty auth logic, replaced with simple middleware. Fixed paths to views in controllers.