Cleaned up ItemAuthController

also added an implementation of RevokeAuth