moved trello auth into controller