changed controller and security mapping