Make controller security honor AccessControl.disable!
Switch to 1.9.3
Version bump - 0.16.5