auth no longer needs token, user now strapped to ember, not express view