Meh testing of controllers, but authentication code works correctly.  Not a fan of hitting the DB every time to check authentication... will think about a better way of doing that.  Other than that, back-end is pretty much done.  All I need to do now it setup the front-end which I think is the easiest part.