I think the business logic should not go in the `routes` file. I would prefer if we kept the `authentications#failure` method.