cipher->decode moved from controller to model