refactor(user-manager): move auth specific methods to a new auth controller