- remove [Authenticate, Secured] from AuthController.Login since that method is used to get a person logged in from a REST app