added warnings in controller comments about security checks