This is the non-API users controller, which is no longer necessary. I'll explain why in the issue I open about client-side authentication.