fix tests, cleanup controllers, apply permissions
also test the mods