ControllerFirewall supports now the serviceLocator