remove unused files
add controller security