Since claims was implemented, the under construction controller can be removed
Made sure that non-authenticated users are handled properly and that redirects go to a sensible place