Solved a silent overwriting of app's auth controller

In production (without 'watch' enabled) my `auth` controller wasn't working. I traced the issue to this module - it was overwriting controllers.auth without checking for any existence. To remove any possible conflict I renamed the compound-passport's controller to __compoundPassportAuth - something very unlikely to be used in production.

I also removed the default routing of /auth to leave app to handle the 404s. Otherwise all unknown /auth/* paths display a message internal to this module.