completes control flow, security measures in controller with redirects