CRUD actions controller tested-now to roll-own authentication