Removed auth from album controller