* Moved /login functionality to AuthController * Refactored password handling logic to use the Authenticator