too many quick fixes

* long controller actions
* nested ressource
* hard to read
* hard to test
* hard to change