Controller should handle cases where no authentication info is given

[jacob-swanson]

Right now creating a new User in controller is causing PHP to crash due to a call on a null object in Request.

[eugene-davis]

Now correctly emits an authentication error rather than crashing.