CrowdAuthUtil should be refactored to be a autowired dependency (at the service layer) behind an interface so that we can test.  All this logic should be moved to the service layer.