More Security Stuff

At the point where I need to stop doing all my control actions in
one-off methods and move everything into controller/accessor objects.