extracted common auth logic to Author::Controller
set_secure_token around filter now set via Author mixin
use write_secure_token() to store authentication token