organize controllers; improve security; improve notification creation