FIX omit private and protected methods in controllers (4th rule)