Move authentication/login logic from route to controller; tidy auth method names