Update PluginController.php

Prevent direct access