refactor vaultroot controller