Refactor controllers to be more readable.

PasswordsController has been left out, because it's behavior is to
be changed to not report any failure when an account can't be found.
CHANGELOG [ci skip]
Merge pull request #20 from ysbaddaden/refactor-controllers

Refactor controllers