Move campaign authentication back to campaign controller