Securing controllers with user authentication