UserController with TracerSecurityModel