Add security to controller