Do users need to be authed to get translation data? Shouldn't that
kind of stuff be statically served? Forgive me, I'm not too familiar
with what you're doing :) but I agree that it should probably be moved
to the `Auth` controller, maybe `Auth.authWithSession`