You're going to need auth at some point. It may be a good idea to namespace this controller to represent the fact that it's the administrative side of locations