split auth stuff into AuthService, added tests for AuthService and Controller::home()