Move Auth out of controller and into a service
Refactor server auth out of routes into own file