Shifted login checks from filter to controller