A controller method should not be public if not *Action