Move the mobile endpoint to the base controller
Replace the login response with a user wrapped in a session serializer