better CMS_Priv_Strict_Controller and nordrassil