extracted common auth logic to Author::Controller