added security to navigation and controller