Extract authentication method to separate concern class + use finders instead of scopes