No longer need to specify the controller.

Redirects and action links don't require an explicit controller
reference.
Added authentication handling.

Started to plug in the authentication.

Needs setting up so that it doesn't share its redirect with the default
URL.