Separating the OAuth actions in a separate controller