removed Manager::$controller
added GET '/users/<slug>/auth/<password>
improved creation of Action instances