Solved a silent overwriting of app's auth controller; Removed default routing of /auth to leave app to handle the 404s