Move user authentication methods to application controller