Strict Controller#needs

a stricter needs should remove a whole class of self trolling.

1. attempting to access controllers which are not specified by needs, should behave like a ReferenceError
2. accidentally mutation of the controllers property itself should not be easily possible.