Fix:  Move logic of auth from routes to Auth_Controller