Move auth helpers into auth controller
Delete unused helper method
Only nitpick completed exercises

This reverts the experiment where people could go nitpick the exercise
they're currently on.
Fix buggy completed list in API
Remove unused code