adding security on controller.
composer.json