repair nordrassil bug, more strict CMS_Priv_Strict_Controller