move current user/login logic out of controller, into it's own service