docs controller updated to show images and a bit more secured