moving things out of app and into authenticator model and auth view