took login out of controllers and made them into service