Added proper policy_attributes method for controller
Remove private call on methods that aren't in controller