spaces > tabs
move auth-related stuff from app.js into controllers/auth, remove useless controllers/main
some more whitespace/syntax fixes